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LICENSE CHANGES | 
ANGER MANAGERS 


Some feel pressured by 
Microsoft to upgrade | 


BY CAROL SLIWA 
Microsoft Corp. gave cus- 
tomers a temporary reprieve 
earlier this summer when it 
postponed some of the contro- | 
versial volume li- 
cense changes that 
had been scheduled 
to take effect Oct. 1. 
But even with deadlines ex- 
tended to the end of February, | 
some IT managers are still | 
having a tough time stomach- 
ing the changes announced in 
May — particularly since new 
licenses or product upgrades 
may cost them more money. 
Several of the 20 IT man- 





agers polled by Computer- 
world this month said they 
haven’t decided what to do and 
feel pressured to make deci- 
sions at a time when they’re 


| dealing with more pressing 


priorities and leaner budgets. 
“I’m upset that Microsoft’s 


| trying to squeeze more money 


out of us and that it’s taking a 
lot of time and my energy and 
my peers’ energy to under- 
stand all of this,” said Jeffrey 
Ratner, assistant vice president 
of distributed engi- 
neering at Enfield, 
Conn.-based Phoenix 
Home Life Mutual 


| Insurance Co. 


“I was disappointed in the 
program itself and how it was 
proposed,” said Jon Ricker, 
president and CEO of Limited 
Technology Services, the IT 
arm of The Limited Inc. and In- 
timate Brands Inc. in Columbus, 

Licenses, page 61 


CELL CARRIERS EYE WIRELESS LANs 


Exploring dual-mi dual-mode 
service for enterprises 


BY BOB BREWIN 
Four of the country’s largest 
cellular telephone carriers 
have started exploring how 
they can incorporate the high 
data rate but short range of 
wireless LAN technology into 
their nationwide networks, 
which offer wide coverage ar- 
eas but low data rates. 

Two of those carriers, AT&T 
Wireless and Cingular Wire- 
less, said their initial focus is 





| on the enterprise — figuring 
out how to provide combined 


wireless LAN and cellular data 
and voice services to large cor- 
porations, which have solidly 
embraced industry standard 
802.11b wireless LANs during 
the past two years. 

One such company is Land- 
star System Inc. in Jackson- 
ville, Fla. The transportation 
services firm uses cellular data 
networks to communicate with 
its truck drivers. Patrick Wise, 
vice president for e-commerce 
at Landstar, called combined 

Wireless, page 14 
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Yes, quite a few application service ie 


® How to calculate the RO! 

& Why project teamwork is critical 
® Monitoring security outsourcers 
® Charts of ASP winners and losers 
® Legal advice on exit strategies 


providers have gone bust. But pioneering 
IT managers say a well-chosen ASP can 
quickly fill gaps in the IT portfolio — 
and the risks can be managed. os 
Computerworld shows you how. pages 27-55. 


GET MORE IN-DEPTH INFO: Visit our Web site - www.computerworld. 
com/q?k2300 — for an extensive collection of articles, research links and 
white papers on the xSP phenomenon. ® Advice on negotiating service-level 
agreements that protect your interests #A list of security service providers A white 
paper on key questions to ask your ASP @A primer on how ASPs do what they do 





The once-exclusive five nines. Soon they will be everywhere. 


99.999% uptime. For a server operating system, it’s a measure of reliability that translates into just over five minutes of server downtime per year.* 
For your business, that means servers are up and running when people need them. Of course, rumors of this 99.999% uptime usually start under 
ideal lab conditions. But where are these five nines when your business needs them? If you're using Microsoft® Windows® 2000 Server-based 
solutions, they may be closer than you think. Today Starbucks, FreeMarkets and MortgageRamp, an affiliate of GMAC Commercial Mortgage, 


| Windows 2000 
Server Family 


« hardware and software technologies, mis: tical operational processes and professional services 





are using Windows 2000 Server-based systems designed to deliver 99.999% server uptime. Of course, not all installations require this level of reliability, 
but one thing is for sure: The Windows 2000 Server family can help you get to the level of reliability you need. In fact, industry leaders such as 
Compagq, Dell, Hewlett-Packard, IBM, Unisys, Stratus and Motorola Computer Group can work with you to deliver solutions with up to five nines uptime. 
To learn more about server solutions you can count on, visit microsoft.com/windows2000/servers Software for the Agile Business. 
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INTRODUCING A WHOLE NEW WAY 
TO LOOK ATF STORAGE MANAGEMENT. 


BrightStor” Storage Management Solutions 


For years, storage management has been an ever-increasing cost, not a source of potential 
opportunity. But that’s all about to change. Because we've created BrightStor, the most 
comprehensive suite of end-to-end storage management solutions on the market. BrightStor 
lets you leverage your resources and data across your entire enterprise, regardless of 
platform or protocol. In fact, BrightStor is the only suite of solutions that supports all 
three industry models — DAS, NAS and SAN — cross-platform. Which means you can look 
at your eBusiness needs as a whole, not piece by piece. So you can optimize your resources 


across your entire storage infrastructure. And, most importantly, you can do more than just 


store information. You can actually use it. Computer Associates™ 


ca.com/storage 
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NEWS 


6 Legal experts warn that a 1998 
copyright law could subject IT re- 
searchers to jail time. 


7 Some Microsoft users are un- 
easy as the company’s antitrust 
case approaches the remedies 


phase. 


8 Financial services firms de- 
posit their data gems in storage- 
area networks for safekeeping. 


10 Free tools and more patches 
are added to network managers’ 
Code Red war chests. 


15 School systems nationwide 
may see their valuable radio fre- 
quency spectrum reallocated to 
meet 3G needs. 


16 Compaq’s new storage strategy 
makes it a contender, say analysts. 


Opinions 


Patricia Keefe 


Don Tapscott 
William M. Ulrich 


CROLL EESELEES ATELIER LILES LE ABN 


ONLINE 
UPDATE ON CANADA'S 
PRIVACY LAW 


Canadian privacy expert Murray 
Long discusses the first seven 
months of Canada’s tough privacy 
law and assesses its future impact 
on e-commerce. WWW. 
computerworld.com/security 


THE BORDERS OF CRM 


Gordon Eiland of Borders Group 
talks about his company’s customer 
relationship management (CRM) 
implementation and where the 
bookseller expects to go next. 
www.computerworld.com/ecommerce 


a k For breaking news, updated 
7 twice daily at noon and 5 
[Imke p.m., visit the Computer- 
world.com Web site: 


www.computerworld.com/q?q4000 
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Quite a few application service 
providers (ASPs) have failed be- 
cause of poor business plans and the 
dot-com crash. But that doesn’t 
mean the ASP phenomenon is a total 
disaster. In fact, we found that users 
like getting the benefit of a complex 
application without having to build 
it themselves. 

This month’s Knowledge Center 
concentrates on how to select and 
monitor an ASP for a successful rela- 
tionship. 


30 Unexpected Benefits 


ASPs can help fill gaps in the IT 
portfolio, say IT managers like Put- 
nam Lovell’s Rodric O’Connor. But 
you need to figure out what to do 
about ASPs that come in through the 
back door. 


36 Watching the Watcher 


“Trust, but verify.” That’s the philos- 
ophy of savvy IT managers as they 
keep an eye on their security service 
providers. 

ONLINE: Questions cus- 


The ASP Primer 


What’s the difference 
between an ASP, an MSP 
and a BSP? Here’s a complete 
tutorial on the business models 
and the challenges ahead. 
www.computerworld.com/q?22415 





tomers should ask to see if their se- 
curity contractor has staying power. 
www.computerworld.com/q?22275 


40 Prepare for the Worst 
Lawyers like Peter 
C. Quittmeyer and 
Asmita Shirali say 
users need pre- 
nuptial agreements 
to protect their in- 
terests, in case the 
ASP’s service dete- 
riorates or the con- 
tractor goes belly- 
up. For example, 
it’s important for 
users to make sure 
they can get access 
to their data and a 
software license, so they can take 
over the data processing operation if 
the ASP fails. 
ONLINE: How to make sure a ser- 
vice-level agreement meets your 
needs. 
www.computerworld.com/q?22417 


42 ASP Winners 
and Losers 


A chart listing 14 ASPs that are out of 


business or no longer offer hosting 
services. Plus, a list of the largest 
ASPs — the survivors. 


44 Fewer 
ASPs, More 
Services 


The number of 
ASPs is dwindling, 
but customers like 
Hill, Holliday CIO 
Mitchell Dicker- 
man are demand- 
ing a wider range 
of services. 


User Turns ASP 


Facing pressure to outsource IT 
operations, a Brooklyn medical cen- 
ter made a dramatic move: It turned 
itself into a profit-driven ASP. 
www.computerworld.com/q?22471 





48 When Does An ASP 
Pay Off? 


Precise return on investment for- 
mulas are hard to come by. But 
there are some techniques for de- 
termining the financial payoff from 
using an ASP. Be sure to factor in 
salaries, capital expenses, opportu- 
nity costs and any hidden fees. 


50 Critical Teamwork 

It takes both sides to make an ASP 
relationship work. The user has to 
assemble the right project staff to 

manage the ASP. Large companies 
may need to deploy an IT project 

manager, an end-user representa- 

tive and the CIO. 


Also in Knowledge 
Center: 


38 Nicholas Petreley asks: Why 
aren’t ASPs taking over the most 
tedious jobs in the IT department? 


52 Dick Hudson warns that ASPs 
are bad news for CIOs (and good 
news for CEOs). 


54 ASP Spotlight: A collection of 


statistics and a glossary. 


Survivors 

When IT staffers at a Los 
Angeles hospital were trans- 
ferred to an outsourcer, good 
management practices meant 
it wasn’t “the kiss of death.” 


www.computerworld.com/q?22437 
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Wyly Scales Back 
Bid to Control CA 


Texas billionaire Sam Wyly dropped 
his effort to take over management 
control of Computer Associates 
International Inc. and said his in- 
vestment firm will instead propose 
a minority slate of four new board 
members at CA’s annual meeting 
next week. Wyly is still seeking to 
oust CA Chairman Charles Wang 
but withdrew himself as a candidate 
for the Islandia, N.Y.-based compa- 
ny’s board. The move came after 
two shareholder advisory services 
sided with CA’s management, al- 
though both said they did so with 
reservations. 


FBI: Code Red Threat 


‘Significantly Reduced 


The FBI's National Infrastructure 
Protection Center said the threat 
posed by an expected re-emergence 
of the Code Red worm has been 
“significantly reduced” because of 
system patching. The worm was ex- 
pected to begin launching new de- 
nial-of-service attacks last night. 


Microsoft Releases 
New Outlook Patch 


Microsoft Corp. issued a patch to 
plug a security hole in its Outlook 
e-mail software that was detailed 
last month. The company initially 
advised users to disable some 
ActiveX controls while it developed 
the patch. 


Accenture to Cut 
1,500 More Workers 


Hamilton, Bermuda-based Accen- 
ture Ltd. said it’s laying off another 
1,500 workers, two-thirds of whom 
are consultants. The cutback re- 
duces the consulting firm’s work- 
force by 2% and follows a 600- 
employee layoff in June. The com- 
pany is also expanding a sabbatical 
program to consultants in Europe 
and Asia. 





BY DAN VERTON 
WASHINGTON 
CLOUD of fear and 
uncertainty hung 
over the 10th an- 
nual Usenix Secu- 
rity Symposium 
here last week, as IT re- 
searchers wondered nervously 
whether they would be hauled 
off to jail by the FBI for reveal- 
ing security flaws in an anti- 
piracy technology backed by 
the music industry. 

That didn’t happen, but new 
charges of government censor- 
ship are being levied by critics 
of a 1998 law designed to pro- 
tect copyrighted digital mater- 
ial, such as software, from 
unauthorized access and copy- 
ing. If the law isn’t changed, le- 
gitimate scientists and corpo- 
rate IT workers conducting re- 
search to improve computer 


| and network security could be 


sent to jail, legal experts said. 

The team of IT researchers, 
headed by Edward Felten, a 
professor at Princeton Univer- 
sity, and flanked by lawyers 
from the San Francisco-based 
Electronic Frontier Foundation 
(EFF), originally planned to 
present the paper at a confer- 
ence in April. But they back- 
pedaled after the Recording In- 
dustry Association of America 
(RIAA) threatened to sue. 

Felten took the RIAA to 
court in June, and the associa- 
tion eventually retracted its le- 
gal threats and gave Felten per- 
mission to present and publish 
his paper only at the Usenix 
symposium. 

The paper, titled, “Reading 
Between the Lines: Lessons 
from the SDMI Challenge,” 
makes public several inherent 
security flaws in a technology 
developed to prevent unautho- 
rized copying of digital music 





files. Felten and others con- 


NEWS 


| Critics say digital copyright protection 
censors legitimate IT, scientific research 


| ducted the research last Sep- 
tember while taking part in a 
security contest sponsored by 
a consortium of recording 
companies known as the Se- 
cure Digital Music Initiative 
(SDMI). 

Despite what Felten and oth- 
ers called “a partial victory” 
for science and the First 
Amendment rights of legiti- 
mate researchers, the overly 


Millennium Copyright Act 
(DMCA) threatens to stifle fu- 
ture IT research, according to 
legal experts. 

“The DMCA set up a system 
where, essentially, the govern- 
ment outsourced censorship of 
science,” said Cindy Cohn, the 
EFF’s legal director. The EFF is 
representing Felten, as well as 
Dmitry Sklyarov, a Russian 
programmer arrested on July 
16 in Las Vegas for allegedly 
developing a software program 
that unlocks the encryption 
used to protect the copyrights 
of electronic-book publishers. 


ANTICIRCUMVENTION 
“No person shall manufacture, 
import, offer to the public, 
provide, or otherwise traffic 
in any technology, product, 
service, device, component, 
or part thereof, that...” 

- 17U.S.C. § 1201(a) of the DMCA 


(A) Is primarily designed or produced for 
the purpose of circumventing a techno- 
logical measure that effectively controls 
access to a copyrighted work 


| (B) Has only limited commercial use 
other than to circumvent a technological 
measure that effectively controls access 
to a copyrighted work 


(C) Is marketed for the purpose of cir- 
cumventing a technological measure 
that effectively controls access to a 
copyrighted work 





broad nature of the 1998 Digital | 


Copyright Law Chills 
~ IT Security Research 


Other scholars “have been 
| chilled” by what happened to 
Felten, and foreign cryptogra- 
phers are afraid to travel to the 
U.S., said Cohn. 


A Matter of Scope 

Enacted in 1998, the DMCA 
broadly outlines restrictions on 
the distribution or sale of any 
product, service or technology 
that circumvents access protec- 
tions to copyrighted material. 
Although the law provides ex- 
emptions for law enforcement 
officials as well as encryption 
and security researchers, legal 
experts said it’s unclear how far 
the law extends and whether 
corporate IT workers conduct- 
ing integration work could be 
caught in its web. 

“There are questions about 
scope,” said Peter Jaszi, a law 
professor at American Univer- 
sity’s Washington College of 
Law. A lot “depends on the ac- 
tual consent” of the owner or 
copyright holder of the soft- 
ware, said Jaszi. In the case of 
encryption research, “a good- 
faith attempt” to gain such 
consent is necessary, he said. 

But not everyone agrees that 
the DMCA is a bad thing. In- 





Sorry, but You Can’t Do That 


ANTITRAFFICKING 
“No person shall manufacture, 
import, offer to the public, pro- 
vide, or otherwise traffic in any 
technology, product, service, 
device, component, or part 
thereof, that...” 

- 17U.S.C. § 1201(b) of the DMCA 


(A) Is primarily designed or produced for 
the purpose of circumventing a techno- 
logical protection measure that effective- 
ly protects a right of a copyright owner 


(B) Has only limited commercially signif- 
icant purpose or use other than to cir- 
cumvent protection afforded by a tech- 
nological copyright protection measure 


(C) Is marketed for the purpose of cir- 
cumventing protection afforded by a 
technological copyright protection 
measure 


COMPUTERWORLD August 20, 2001 


dustry representatives, as well 
as authors and other content 
providers, have vehemently 
| argued that the DMCA pro- 
tects their right to earn a living 
by discouraging dishonest peo- 
ple from violating copyright 
protections. 

The DMCA well- 
balanced piece of legislation 
that took into account every 
group’s interests,” said Keith 
Kupferschmid, intellectual prop- 
erty counsel for the Software & 
Information Industry Associa- 
tion in Washington. 

In the Sklyarov case, for ex- 
ample, the Russian program- 
mer engaged in the trafficking 
of software that circumvented 
technological protection mea- 
sures, Kupferschmid said. Skly- 
arov, an employee at Moscow- 
based ElcomSoft Co., allegedly 
tried to sell copies of the cir- 
cumvention software at the Def 
Con conference in Las Vegas. 

Dan Langin, an attorney who 
specializes in computer securi- 
ty and represents companies 
such as Redwood City, Calif.- 
based Recourse Technologies 
Inc., said the fair-use clause of 
the DMCA excludes reverse- 
engineering for the purposes of 
doing integration work and 
legitimate research. In that 
respect, “IT workers have pret- 
ty solid ground to stand on,” 
he said. Nonetheless, Langin 
added that a written agreement 
with software companies for 
access to code beyond the nor- 
mal application programming 
interface is a critical protection. 

For Felten and other re- 
searchers, however, the uncer- 
tainty of how far the law ex- 
tends is cause enough to stifle 
legitimate research that can 
have positive effects beyond 
computer security. 

“The DMCA seems to cast a 
very wide net and will catch a 
lot of things besides computer 
security,” said Felten. For ex- 
ample, the echo-detection 
methods used by Felten’s re- 
search team to break the secu- 
rity of music CDs is a break- 
through technology that can be 
used by seismologists, he said. 

“People don’t know what 
they can say and what they can 
write,” said Felten. “The scien- 
tific community can’t operate 
that way.” D 
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Microsoft Faces Same Old Threats in New Remedy Phase 


Government talks tough; several options, 
including a breakup, remain possibilities 


BY PATRICK THIBODEAU 
WASHINGTON 

When management at Jim 
Havens’ company, Illinois Tool 
Works Inc. subsidiary 


ant’s antitrust case is like a 
ghost in the room. Without 
ever being mentioned, the le- 
gal case silently influences de- 
cisions. 
ways back there,” Havens said. 

Havens, IT manager at the 
Rockland, Mass.-based manu- 


facturing company, said Micro- | 


soft Corp.’s continuing legal 
problems are keeping him 


from considering a migration | 


to Windows XP. 
“I don’t know what the right 
answer is,” said Haven. 


next phase: deciding 
what remedy to impose on Mi- 


case’s 


Tacc, | 
discusses its Microsoft migra- | 
tion strategy, the software gi- | 


| crosoft. The U.S. Court of Ap- 


peals last week rejected Mi- 
crosoft’s request to delay the 


| case while its appeal to the U.S. 


Supreme Court is pending. 
The case will return Friday to 
the lower court for remedy 


| hearings and the appointment 
| of a new judge. 
| asked the high court to throw | 
| out the trial judge’s rulings for | 
“The instability is al- | 


Microsoft has 


his disparaging out-of-court 
comments about the company. 


| A decision on that appeal is 


due in October. 

The government hasn't re- 
vealed its proposed remedy, 
but it’s talking tough. 


“Any remedy has to change 


fundamentally Microsoft's use 


; of monopoly power in the mar- 
| ket,” 


The answer may come in the | 


said Richard Blumenthal, 
Connecticut’s attorney general 
and one of the leaders of the 
18-state coalition involved in 


Developers Receive Talisker 
Beta Version of Windows CE 


Link between it and 
upcoming Pocket PC 
release still unclear 


BY BOB BREWIN 

Microsoft Corp. has_ intro- 
duced the beta version of its 
next-generation Windows CE 
operating system, used in 
Pocket PCs and embedded sys- 
tems. The company said it ex- 
pects to have the final version 
of the new operating system, 
code-named Talisker, ready for 
release by year’s end. 

The enhancements built into 
Talisker, Microsoft said, won't 
be available in the new version 
of the the company’s Pocket 
PC operating system, code- 
named Merlin, also slated for 
release before year’s end. 





Megan Kidd, product man- 


| ager for Microsoft’s embed- 
ded systems and appliance | 
platforms group, said the new | 


Windows CE includes beefed- 
up support for the 


cludes enhanced security and 
the ability to support roaming 
between different networks. 
Talisker also features 


build onto targeted devices, 
Kidd said. 


She said Talisker is targeted | 


at original equipment manu- 


facturers, with corporate ap- | 


plication developers building 
their systems on top of the new 
operating system 


Kidd added that the Plat- | 


form Wizard provides devel- 
opers with a “baseline configu- 


802.xx 
wireless LANs widely used by | 
corporations. The support in- | 


a Plat- | 
form Wizard that will make 
it easier for developers to | 


What Fate Awaits? 


The threat of a breakup hasn’t disappeared for Microsoft since 
the June 28 U.S. Court of Appeals decision in its antitrust case, 
but legal experts disagree on how strong the threat that remains 
is. The court can consider several options: 


Structural remedies: 
Breakup. Microsoft could be divid- 
ed among business units, as Jack- 
son proposed. Theoretically, the 
court also has the option of creating 
“Baby Bills,” separate units that 
would compete against one another. 
Compulsory licensing. This would 
require Microsoft to license Windows 
to competitors, which could custo- 
mize the application and create com- 
peting versions. 


the case, in an interview last 
week. “The test set forward by 
the Supreme Court indicates 
that there has to be fundamen- 
tal changes.” 

That test was outlined by the 
appeals court in its June 28 de- 
cision. Citing three Supreme 


| Court cases, the appeals court 


ration” of a targeted device, al- 
lowing them to quickly cus- 
tomize their requirements. She 
said the new operating system 


| should “definitely make it easi- 
| er to port applications from | 
| the desktop” to embedded de- 


vices. 

The built-in wireless LAN 
security was designed to meet 
requirements for the “defense 
in-depth” strategy advocated 


by security consultants after a | 


A Look at Talisker 


>Beefs up wireless 
security with support for 
smart-card encryption 


> Includes built-in support 
for wireless LAN roaming 


> Includes a built-in Plat- 
form Wizard that makes it 
easy to port from the desk- 
top and configure devices 


>Won’t include these 
features in new version of 
Pocket PC, slated for release 
by year’s end 


Conduct remedies: 
Contracts. Microsoft could be 
prohibited from entering exclusive 
contracts that favor its products 
Pricing. It could be required to 
publish its Windows pricing to PC 
manufacturers. 

APIs. The company could be re- 
quired to disclose the APIs need- 
ed to ensure interoperability to 
third-party developers, something 
the company says it does now. 


said a test for a remedy should 
include the ability to “termi- 
nate the illegal monopoly.” 

The court also said a remedy 
must “unfetter” the market 
from anticompetitive conduct, 
deny the defendant any bene- 
fits it may derive as a result of 
the violation and ensure “that 


series of papers and mock at- 
tacks that exposed holes in the 
built-in Wired Equivalent Pri- 
vacy protocol in 802.llb wire- 
less LAN systems. 

Wireless security enhance- 
ments in Talisker include sup- 
port for smart-card encryption 
and an encrypted/protected 
store on the enterprise level. 

Palm Inc. in Santa Clara, 
Calif. said it doesn’t view 
Talisker as much ofa threat. 

“This sounds like an incre- 
mental release of their prod- 
uct, and it’s a lot of stuff you 
can do today in a Palm hand- 
held,” said Michael Mace, 
Palm’s chief competitive offi- 


| cer. “We already have support 


for 802.xx, and our OS is so 


|| simple, our developers don’t 
| need a wizard.” 


Mace said he was “confused” 


| about the relationship of Tal- 


isker to the new Merlin version 
of the Pocket PC operating sys- 
tem. Microsoft didn’t help al- 
lay that confusion, declining 
to provide any details about 
Merlin until closer to the prod- 
uct’s release date. D 


ae aon 


there remain no practices like- 
ly to result in the monopoliza- 
tion in the future.” 

[rial Judge Thomas Penfield 
Jackson ordered the company 
to be split in 
the operating 
other lines of 
never held hearings on his pro- 


two, separati 
system unit from 


business, but he 


posal and didn’t explain how a 
breakup would restore compe- 
tition. For those reasons and 
others, his remedy was reject- 
ed by the appeals court. 

The court, however, upheld 
findings that Microsoft had il- 
legally maintained a monopoly 
in operating systems, while re- 
jecting the claim that the com- 
pany had sought to monopo- 
lize the browser market. ‘I 
court also sent the finding of 
“illegal 
court for a new hearing using a 
different standard. 

Bruce Sokler, an antitrust at 
at Mintz, Levin, 
Ferris, Glovsky and Popeo PC 
in Washington, that with 
out finding fault on the 


he 


tying” back to trial 


torney Cohn, 
said 
tying 
issue, which concerns the inte- 
gration of different products, 
the justification for a breakup 
isn’t strong. 

Where the appeals court did 
fault the company, particularly 
on its exclusive contracts, “the 
first remedy usually thought of 

would be fencing-in-con- 
duct remedies,” said Sokler 

A remedy that makes sense 
to Wesley Howland, a pro- 
grammer/analyst at 
Aircraft Co. in Wichita, Kan., is 
to force Microsoft to rel 
Windows source code for oth- 


Cessna 
ease its 


er companies to develop com- 
peting Windows 
With pending changes to Mi- 
crosoft’s enterprise operating 
system licensing, “now they’re 
taking advantage of their mo- 
nopoly,” Howland said. 

But Mark Hawkins, IT man- 
ager at Augusta Newsprint Co., 


versions. 


in Augusta, Ga., said Microsoft 
should be left alone. 
“Microsoft is a strong com- 
pany and they earned it, and 
the government has no reason 
or means to go interfere with 


that,” said Hawkins. D 
overage of 


battles, visit o 
Web site 


Link® 


| www.computerworld.com/q?s1100 
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Merrill Lynch Hands 
Over SAN Management 


Expects to cut 20% off TCO of storage system 


BY LUCAS MEARIAN 
ERRILI 
& Co.'s 
technology of- 

Chris 


LYNCH 


ficer, 

Corrado, is 
juggling an enormous server 
consolidation at the broker- 
age’s New York headquarters. 
At the same time, he’s migrat- 
ing its business data to a stor- 
age subnetwork, the last 
thing he wanted to do was wor- 


so 


ry about what storage technol- 
ogy would work best. 

The answer for Corrado, and 
an increasing number of other 
Global 2,000 IT 
was to outsource his storage- 
area network (SAN). 

While Merrill Lynch’s IT 
staff could have built the SAN 
Corrado said he ex- 


executives, 


in-house, 


chief 


pects to save 20% on the total 
cost of ownership of the stor- 
age network by having Wal- 
tham, Mass.-based Storage 
Networks Inc. build 
and then remotely 
manage the SAN. 

rhe effort began in 
January, and Corrado 
expects the project to 
be completed within 
the next year. 

To Merrill 
Lynch has been using 
just 40% of the stor- 
age capacity of its di- 
rect-attached 
system. Meanwhile, 
nance and upgrade costs have 
been steadily increasing. 

The world’s largest broker- 
age house is taking a slow and 
cautious approach to migrating 


date, 


storage 
mainte- 


Equities Settlement Giant 
Moves to SAN Infrastructure 


System to manage 
I5TB-plus of data 


BY LUCAS MEARIAN 
The Depository Trust & Clear- 
ing Corp. is in the middle of a 
two-year migration from a 
mostly mainframe and decen- 
tralized client/server comput- 
er model to a storage-area net- 
work (SAN) that will centrally 
control more than 15TB of in- 
ternal data related to $23 tril- 
lion worth of securities. 


Depository Trust, a New 


York-based firm that provides | 


the primary infrastructure for 


the clearing and settlement of 


most of the equity, corporate 
debt and bond transactions in 
the U.S., announced its SAN 
migration last week. 


| 
| 
| 
| 
| 
| 


Since the project began 10 
months ago, Depository Trust 
has taken a cautious approach 
to adopting the SAN model, 
beginning with the company’s 
tape backup systems and the 
more recent integration of its 


disk arrays, said Michael 


Obiedzinski, vice president of 


information systems at the 
firm. Important data related to 
daily clearing and settlement 
activities will remain on its 
legacy mainframe system for 
the immediate future. “We put 
servers on the SAN that we 
considered to have an internal 
impact first,” he said. “Some 


mainframes for years to come.” 

Depository Trust is moving 
to the SAN in response to an 
enormous growth in data vol- 
ume. That increase is being dri- 


CORRADO: Merrill 
Lynch is taking a 

cautious approach 
to SAN migration. 


| es from Brocade 


| technology 
applications will be on our | 


| centrally managed SAN, 





its business and mission-criti- 
cal data to a Fibre Channel SAN 
over the next few years. Cur- 
rently, about 15% to 20% of the 
firm’s data resides on the SAN. 
“This is a long process. You 
can try to do it fast — if you're 
” Corrado said. 
Corrado cautioned 
entering 
with 


suicidal, 
those into 
contracts 
age service providers 
(SSP) to read the fine 
print of any service- 
level agreement and 
make it work to their 
advantage. 

“You have to force 
guys to 
along not only hard- 
savings 


stor- 


these pass 


ware cost 


| over the years but productivity 


costs, considering storage soft- 
ware will get better as well,” 
Corrado said. “I tell them, ‘I 
don’t care how you do it, but 
you're going to make utiliza- 


ven by a boom in technology 
projects at the firm, and the re- 
sult is a shifting of tons of data 
from the server environment to 
the storage network. In the past 
four months, data has in- 
creased fourfold at the firm. 
Obiedzinski is also hoping to 
use the SAN to make more ef- 
fective use of the 30% to 40% 


| of available data space that’s 


being wasted by inefficiencies 
in the current storage architec- 
ture, he said. 

Obiedzinski declined to say 
how much money Depository 
Trust has spent on the SAN 
project. He did say that switch- 
Communica- 
tions Systems Inc. in San Jose | 
provided the networking foun- 
dation for the company’s stor- 
age environments “to help us 
quickly realize a return on our 
investment in 
servers and storage.” 

For instance, by using the 
De- 
pository Trust can now man- 
age four times as much data 
with the same number of ad- 


| 
| 
| 
| 
| 
| 


tion in my shop go up, so, on 
average, 
down.’” 

Part of the impetus behind 
Merrill Lynch’s outsourcing 
deal: The firm’s IT staffers are 
busy consolidating about 2,500 
servers at its New York head- 


quarters down to 250 to 300 | 


machines over the next year. 


Boom Times for SSPs 

For a marketplace that last 
year took a huge revenue nose 
dive in conjunction with the 
dot-com debacle, SSPs are 
now, ironically, enjoying a 
comeback through on-site 
management of storage and 
software sales. In large 
that’s due to the fact that IT 
managers are trying to stretch 
every dollar in today’s slump- 
ing economy. 

According to San Jose-based 
Dataquest Inc., the North 
American SSP market is ex- 
pected to grow from $176 mil- 
lion last year to more than $6 
billion by 2004. 

SSPs once depended heavily 
on hosting their customers’ 
storage at point-of-presence 
facilities. But large enterprises 


ministrators and had increased 
data throughput by moving 
from clunky 4mm tape drives 
to a speedier Fibre Channel 
network. 

In the early stages of the 
project, Depository Trust had 
to overcome some technical 
hurdles, such as the interoper- 
ability between the Fibre 
Channel and the SAN vendor 
equipment. 

But Obiedzinski said his 
group is addressing those is- 
sues by working closely with 
its key storage vendors, includ- 
ing Brocade, Hopkinton, 
Mass.-based EMC Corp. and 
Islandia, N-Y.-based Computer 
Associates International Inc. 

“The proper standards and 
interoperability will emerge,” 
Obiedzinski said. “The current 
challenge is to identify best-of- 
breed SAN management tools 
that are well integrated.” D 

storage technologies, 


ck 
Rus visit our Web site. 


www.computerworld.com/q?k1700 


For more news 
and information on 


I want my price to go 


| Clara, 


part, | 
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never warmed to the idea of 


letting someone else handle 
their mission-critical data. So 
SSPs were mainly used for 
backup and disaster recovery. 


Now, “over 50% of the rev- 


| enue in the SSP market appears 


to be coming from professional 
services, not storage services,” 
said Greg Brashier, an analyst 
at Strategic Research Corp., a 
market research firm in Santa 
Barbara, Calif. 

According to Bob Zimmer- 
man, an analyst at Giga Infor- 
mation Group Inc. in Santa 
Calif., the reason SSPs 
are becoming more popular for 
managing SANs is that they 
can often reduce a firm’s costs 
by as much as 40%, or 15 cents 
per megabyte per month to run 


| vs. 21 cents per month using in- 


house staff. 

“[SSPs] are also getting 
prices for hardware you could- 
n't touch,” Zimmerman said, 
pointing out that vendors get 
wholesale advantages. 

Corrado said that if Merrill 
Lynch’s outsourcing project 
didn’t reduce costs by at least 
10%, he wouldn’t do it. “It’s just 


not worth the risk,” he said. D 


Sold on SANs 


The COMPANY: The Deposito- 
ry Trust & Clearing Corp. inNew | 
York provides the primary infrastruc- 
ture for the clearing and settlement 

of most of the equity, corporate debt 
and bond transactions in the U.S. 


The project: the company s 10 
months into a two-year migration 
from a mainframe and decentralized 
client/server computer model to a 
SAN that will centrally control more 
than 157B of internal data. 


The benefits: the company 
has increased data backup per- | 
formance by four times its origi- 
nal throughput and reduced the 
time to restore data, while increasing 
application uptime. In addition, by in- 
terconnecting its SANs across met- 
ropolitan optical networks, Deposi- 
tory Trust has enabled backup 
across remote sites, further re- 
ducing the cost of data backup and 
recovery and eliminating the need 
for more expensive, off-site data 
storage. 
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Restructuring Leaves 
Dell With Q2 Losses 


Dell Computer Corp. said it lost $101 
million in its second quarter ended 
Aug. 3, as the PC and server vendor 
absorbed a $742 million charge re- 
lated to layoffs and facility closings. 
Last year, the company saw a profit 
of $603 million for the same period. 
Revenue dropped 1%, from $7.7 bil- 
lion a year ago to $7.6 billion. 


HP Suffers Another 
Big Drop in Profits 


Hewlett-Packard Co. reported a net 
profit of $111 million for its fiscal 
third quarter ended July 31, down 
89% from $1 billion a year ago. 
Revenue fell 14%, from $11.8 billion 
to $10.1 billion. Sales fell in all geo- 
graphic regions, and HP CEO Carly 
Fiorina said she doesn’t expect to 
see an improvement in IT spending 
until next year. 


Coors Qutsources 
Some IT to EDS 


Coors Brewing Co. in Golden, Colo., 
agreed to a five-year “on-demand” 
IT outsourcing deal with Electronic 
Data Systems Corp. Plano, Texas- 
based EDS will host Coors’ SAP ap- 
plications and provide other IT ser- 
vices as needed. About 70 Coors 
employees will shift to EDS as part 
of the deal. Financial terms of the 
deal weren't disclosed. 


IRS Signs Deal to 
Modernize Web Site 


The Internal Revenue Service has 
signed on with Bermuda-based con- 
sulting firm Accenture Ltd. to mod- 
ernize its Web site. 

Planned changes to the site 
include streamlining access and 
improving help desk integration for 
users who have problems on the 
site. The contract has a potential 
value of $33.6 million over five 
years, but many of the changes are 
due early next year. 


BY JAIKUMAR VIJAYAN 
AND SAM COSTELLO 


ICROSOFT CORP. 
last week issued 


its Internet In- 


worms. 
The company also released 


two free tools that are sup- 


posed to let users assess the se- 


they have installed all recom- 


| mended patches. Microsoft said 


it hopes to speed up the patch- 
ing of systems, thus leading to 
a decrease in the spread of 
worms such as Code Red. 


IIS, which can be downloaded 


| from Microsoft’s Web site, in- 
cludes the functionality of all | 


IIS wasn't the only Microsoft prod- 
uct fingered for security flaws last 
week. The company also said a 
hole in a newsgroup service that 
comes with Windows and its Ex- 
change messaging server could be 
used to launch denial-of-service 
attacks against some systems. 

The problem occurs in the Net- 
work News Transport Protocol 
(NNTP) service in Windows NT 
4.0, Windows 2000 and Exchange 
2000, Microsoft said. NNTP is a 
standard protocol for posting, dis- 
tributing and archiving news arti- 
Cles via Internet-based servers. 

The vulnerability results from a 
memory leak in a program that 
processes news postings sent over 
the Internet, according to a Micro- 
soft advisory. Postings that are 
constructed in a particular manner 
and sent to an affected server would 
trigger the memory leak, said Scott 





a new patch for | 


formation Serv- | 
| er (IIS) software to address 
| five newly discovered security 
| holes, including one that can 
be exploited by the Code Red | 
| puts systems at the mercy of 


curity levels of their Microsoft | 
| products and check to see if 


The cumulative patch for | 








NEWS 


| Five new IIS vulnerabilities discovered; 
firm issues patch plus two security tools | 


| previously released patches for 


Versions 4.0 and 5.0 of the Web 


server software, in addition to | 


addressing the new holes. 
Three of the five previously 
unknown flaws could enable 
malicious hackers to launch 
denial-of-service attacks, Mi- 
crosoft said. Of the three, one 


| that affects only IIS 4.0 is par- 
because it | 


ticularly serious 


the Code Red worms, the com- 
pany said in an advisory. 


The other newly discovered | 
holes could allow attackers to | 


gain administrative access to 
Web servers. Because of that 
and the Code Red risk, systems 
administrators should 
the new patch to all machines 
running IIS 4.0 or 5.0 as soon as 
possible, said Scott Culp, a Mi- 
crosoft security manager. 
Meanwhile, the new tools 
aimed at helping users keep 
their systems up to date on 


Culp, a Microsoft security manager. 
By sending a sufficient number of 
such malformed postings to an 
affected server, Culp added, an 
attacker could deplete the server's 
available memory and bring down 

a system. 

Any NNTP news server that ac- 
cepts postings from the Internet 
and is running the affected soft- 
ware is vulnerable to such attacks, 
Microsoft cautioned. But the com- 
pany issued a patch that it claims 
will eliminate the problem by prop- 
erly deallocating memory after a 
posting is processed. 

One mitigating factor is that the 
NTTP service doesn’t run by default 
on Windows or Exchange, Culp said. 

Also minimizing the potential im- 
pact of the NNTP flaw is the fact 
that most large newsgroup servers 
aren't Windows-based, said Russ 
Cooper, an analyst at security firm 


apply | 
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Microsoft Warns of 
New Code Red Risk 


| patches were released almost a 
month after the first outbreak | 


of Code Red, which struck 
again late last month and was 
followed this month by a simi- 


| lar worm, dubbed Code Red II. 


Security analysts said that a 
failure to patch systems for an 
IIS flaw publicized by Micro- 
soft in June contributed to the 
rapid spread of the worms. 
Microsoft teamed with secu- 


rity software developer Shavlik | 


Technologies LLC in St. Paul, 
Minn., to build the HFNetChk 
and Microsoft Personal Secu- 
rity Advisor tools. The latter 
product is aimed at small busi- 
nesses and home users, but 
HFNetChk was developed for 
use on corporate networks. 
HFNetChk is a command- 


line tool that runs on Windows 


NT 4.0 and Windows 2000, 
Microsoft said. The software 
can scan the status of all ma- 
chines on a network, check 
their patches against an XML- 
based patch database main- 
tained by Microsoft and deliv- 
er a report detailing the ma- 


| chines that need to be updated. 


Newsgroup Service in Windows Could Trigger Attacks 


TruSecure Corp. in Reston, Va. 

“It's an issue that doesn’t affect 
a very large number of people,” 
Cooper said. But for those users 
who are running a Windows-based 
NNTP service, he added, “the mes- 
sage here is [to] get the patch.” 

Microsoft said the vulnerability 
doesn’t let attackers take adminis- 
trative control of systems or tamper 
with data stored on vulnerable 
servers. Administrators whose sys- 
tems are attacked can restore ser- 
vice by shutting down the IISAdmin 
service and restarting the affected 
machines. 

Memory leaks such as the one in 
the NNTP service are caused when 
a particular process requests addi- | 
tional memory from the operating 
system to perform a task and then 
fails to return the memory when the 


job is complete. 
~ Jaikumar Vijayan 





Code Red Finds 
Another Hole 


Microsoft said a new vulner- 
ability in its IIS software “is 
being actively exploited” by 
the Code Red worm, even on 
systems that were patched to 
prevent infection. 


What systems are affected: 


Computers running IIS 4.0 
in a configuration that redi- 
rects Web site visitors from 
out-of-date Web addresses 
to current ones. 


The risk for users: denial- 


of-service attack could 
cause the IIS server to fail 
and temporarily stop pro- 
cessing requests for Web 
pages. 

Why Code Red is involved: 
When the worm tries to 
infect a server, it sends a 
request containing invalid 
length information that trig- 
gers the attack. 


a ee cence 


The tools are the first in a se- 
ries of products from Micro- 
soft aimed at helping users bet- 
ter secure their systems, Culp 
said. He added that new tools 
related to US and other soft- 
ware will be released within 
the next few weeks. “Tools like 
this will go a long way toward 
preventing things like Code 
Red in the future,” Culp said. 

Using HFNetChk, for in- 
stance, IIS users would have 
been proactively informed 
about the availability of the 
new patch, Culp said. 

Such moves reflect an in- 
creased urgency about securi- 
ty at Microsoft, said Eric Hem- 
mendinger, an analyst at Ab- 


|} | erdeen Group Inc. in Boston. 


“I think they’ve begun to re- 
alize that users take such is- 
sues very seriously and that 
[not addressing them] could 
slow Microsoft’s deployment 
in the enterprise,” Hemmen- 
dinger said. D 


Costello is a reporter for 
the IDG News Service. 
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Continued from page 1 


Wireless 


wireless LAN and cellular data 
service “a perfect world,” if the 
carriers can find a way to inte- 
grate the two systems so that a | 
user can automatically shift 
from one to the other. 

But the carriers need to en- | 
sure that “I get connected to | 
my network and not someone | 
else’s,” said Wise. “We already 
have enough security prob- 
lems with 802.11b networks.” 

Joe Burdick, telecommuni- 
cations network manager for | 
wireless data at United Parcel 
Service Inc. in Atlanta, is well | 
aware of the cellular carriers’ | 
wireless LAN plans. “We’ve | 
had presentations from [the 
carriers],” he said. But he said 
UPS is concerned about the 
implications for its plans to de- 
velop its own dual-mode ter- | 
minal for use by its drivers. 

That terminal will be de- 
signed to work on the UPS pri- 
vate wireless LAN network, but 
Burdick said he worries that the | 
proliferation of wireless LANs 
will cause the driver’s device to | 
“wake up and seek out another 
network and server.” If the car- 
riers go ahead with their plans, | 
it could lead to widespread use | 
of devices that would automati- 
cally seek to log on to the UPS 
network, he added. 

“IT understand why [the car- 
riers] want to do this,” Burdick | 
said. “But I don’t see how they | 
can resolve the security or | 
[network] management issues.” | 

FedEx Corp., meanwhile, has 
already equipped its carriers | 


| with 


with dual-mode wireless LAN 


cellular devices. Ken Pasley, | 


FedEx’s director of 


| systems development, said he 


would be interested in a carri- 
er offering that provided him 
plug-and-play 


would require carriers taking 


on system integration tasks | 


now handled by FedEx itself. 
While the carriers empha- 
sized that they haven’t made 


any decisions about 


| when they will build wireless | 


LAN capabilities into their net- 
works, they said manufactur- 
ers have already started work 
on the development of dual- 
wireless LAN/cellular 
infrastructures, 


mode 
PC network 
PC cards and phones. 

Tom Trineer, vice president 


of multimedia strategy at Red- | 
AT&T | 


mond, Wash.-based 
Wireless, said that some “very 
big” base station and handset 
companies have already start- 


| ed work on dual-mode equip- 
ment, but he declined to iden- 


tify those companies. 


Dave Williams, vice presi- 


dent of strategic planning at 
Atlanta-based Cingular Wire- 
less, said that in addition to 
looking at using wireless LANs 
for data, his company has start- 
ed to consider using them to 
deliver voice-over-IP 
on corporate campuses. 
Williams said Cingular is ex- 
ploring how to provide users 


with the equipment and sys- | 


tems that would let them easily 
shift from corporate wireless 


LAN networks offering speeds 


of up to 11M bit/sec. on the 


802.11b standard to the compa- | 


ny’s third-generation cellular 


Staying Connected 


User is on campus with a laptop 
equipped with an 802.11b LAN 
and cellular mobile card. While 
on campus, laptop connects 
to wireless LAN. 


wireless | 


wireless | 
| capability in both modes. That, | 


how or 





service | 





een A 


TIM bit/sec. (802.11b) 


2002: 55M bit/sec. 
(802.11a) 


Corporate and academic 
campuses; public-access 


19.8K to 28.8K bit/sec. 


Late 2001 to 2003: 144M to 
2M bit/sec. (2M bit/sec. avail- 
able only while stationary) 


Nationwide 


networks in airports, hotels, 


coffee shops 


Free on campuses; public-ac- 
cess “all you can eat” connec- 
tions run $5 per session 


Not available 


Nationwide service at up to 
55M bit/sec. and automatic 
roaming, with pricing following 


ISP model of $19.95 to 
$29.95 per month 


data service, which can deliver | 


speeds from 144K to 384K 
bit/sec. (see chart). 


Trineer agreed that such a 


| dual-mode enterprise strategy 


makes sense and could provide 
corporations with the means 
to easily deliver data stored in 


enterprise resource planning | 


and customer relationship 
management systems to mo- 


bile workers, 


their connections. 
Besides offering dual-mode 
network infrastructure and 
cards to enterprise 


Back to corporate campus mainframe 


Gets into car, and 
connection goes 
to 3G service. 


Stops for cup of java at 
coffeehouse; connection 
switches back to 802.11b LAN. 


Arrives at airport; 
laptop seeks out 
public-access 
wireless LAN. 


regardless of 
their location or the speed of 


users, | 


Per-minute charges; 
carriers decline to disclose 
pricing until rollout 


Available today; includes 
automatic billing and settle- 
ment between carriers 


Nationwide service 
limited to 2M bit/sec.; 
pricing continues to be 
by the minute 


Williams said, Cingular is in- 
vestigating services that would 
allow enterprise users to easily 
roam and switch from cellular 
mobile data to enterprise and 
public-access wireless LANs. 
Such LANs have been in- 
stalled by companies like 
Richardson, Texas-based Mo- 
bileStar Network Corp., in lo- 
cations ranging from Ameri- 
can Airlines lounges to Star- 


| bucks coffee shops. 


As public-access_ wireless 
LAN networks proliferate — 
Austin, Texas-based Wayport 
Inc. is battling MobileStar in 


Cellular tower 

(3G wireless, 

144K to 384K 
bit/sec.) 





Wireless LAN 
tower (802.11b) 
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the hotel and airport markets 
— nationwide cellular carriers 
can provide in-house expertise 
to handle roaming and billing 
between multiple systems, as 
well as build in security on the 


back end, Trineer said. 


Craig Mathias, an analyst at 
Farpoint Group in Ashland, 
Mass., said the carriers are be- 
ginning to focus on wireless 
LANs as an adjunct to their 
networks for a host of reasons, 
including low-cost equipment, 
spectrum availability (wireless 
LANs operate in the unli- 
censed 2.4-GHz band, meaning 
the carriers don’t have to write 
billion-dollar checks to the 
government for frequencies) 
and throughput that may never 
be equaled by mobile cellular 
data networks. 

Plus, Mathias said, “wireless 
LANs are going to be every- 
where — large enterprises, 
small business, transportation 
hot spots and the home.” 

Trineer said he views the un- 
licensed nature of wireless 
LANs as a downside because 
of possible interference prob- 
lems. He also questioned the 
economics of the “hot spot” 
business pursued by Mobile- 


| Star in airports, hotels and cof- 


feehouses. Users, he said, 
“place a premium on ubiqui- 
tous coverage.” 

Verizon Wireless Inc. and 
Sprint PCS Group have also 
started to look at how they can 
mesh wireless LAN services 
with their existing networks. 
But spokesmen for both de- 
clined to provide details, say- 
ing only that they are exploring 
how wireless LANs can com- 
plement existing services. D 


BACK-END SYSTEMS 


Billing, Firewalls; 

roaming, connection 

settlement goes back 
to corporate 
systems. 
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3G Requirements Raise 
Stakes in Spectrum Battle 


Schools, Pentagon and mobile business 
battling for rich but finite resource 


BY BOB BREWIN 
DECISION on re- 
allocating 


| support 3G high-speed wire- 


| less data in the 
radio | 


frequency spec- | 


trum, now used 
by school 
tems, to support third-gener- 
ation (3G) wireless services 
could be made by the end of this 


sys- | 


month, according to Federal | 
Communications Commission | 


Chairman Michael K. Powell. 
Current spectrum stakehold- 

ers and potential users have 

been fighting all year over 


what’s viewed as the raw ma- 


terial of the mobile informa- 
tion economy. Former Presi- 
dent Bill Clinton triggered the 
fight late last year when he put 
the need for new spectrum to 


Speeds & Services 


The FCC expects 3G wireless 
networks to provide data 
throughput at the speed 

of wired networks while 
offering unique services 

such as location-determina- 
tion technology. 


Projected 3G Speeds 
> 144K bit/sec. for vehicle- 
based mobile users 


» 384K bit/sec. for pedes- 
trian mobile users 


»2M bit/sec. for 
stationary/indoor users 

Services 

> Built-in location 
determination 


>» Bandwidth on demand 


> Multimedia mail 
store-and-forward 


> Built-in interoperability 
and roaming 

»>Common billing sys- 
tems that allow sharing 
of information among 
service providers 


| to nonfederal users, 


| he occupies 





rawest of eco- 
nomic terms: Find it and ex- 
ploit it, or risk losing the tech- 
nology lead. 

Following that mandat 
FCC and the National Tele- 
communications and Informa- 
tion Administration 
tried to find enough spectrum 
to support 3G without displac- 


ing or interfering with incum- | 


bent users. 

The FCC, charged with com- 
ing up with potential 3G band- 
width in frequencies allocated 
in March 
designated the 2,500-to-2,690- 
MHz band as the best candi- 
date for mobile use. 

The NTIA, which hunted for 


spare spectrum in the frequen- | 
| cies assigned to federal users, 
Department of 


including the 
Defense (DOD), named the 
1,710-to-1,850-MHz band its 


best choice. But both of these 


| chunks of spectrum are already 


occupied by users ranging 
from school systems to myriad 


DOD ground and space com- | 


munications systems. Neither 
the schools nor the DOD has 
shown much 
move or share bandwidth, for 


more room to maneuver, the 
FCC earlier this month added 
several other bands (see chart 


| at right) for possible 3G use. 


Bruce Braciszewski, senior 


| director for instructional tele- | 


vision services at the San 


Diego County Office of Educa- | 
tion, makes the economic ar- | 
The spectrum | 


gument easily. 
in the Instruc- 
tional Television Fixed Service 
(ITFS) frequencies within the 
2,500-to-2,690-MHz band en- 
ables him to beam 20 digital 
channels of instructional TV 


e, the | 


(NTIA) | 
| customers. 


| well, 


inclination to | 


all over the vast county. But it’s 
dee a revenue stream, Bracis- 
zewski said. 

The channels in the ITFS 
band, he explained, are inter- 
leaved with commercial, fixed 
wireless channels used by car- 
like PCS Group 
and WorldCom Inc.’ 
have 
dollars to 


riers Sprint 
Those car- 
riers spent 
acquire the fixed 
wireless spectrum to provide 
“last mile” 


for business 


broadband services 
and residential 
Braciszewski esti- 
mated that an agreement with 
WorldCom has already fun- 
neled $6 million into the 
school system. 

Monsignor Michael Demp- 
sey, who runs the ITFS system 
serving the 
Brooklyn, NY., 
ity-sharing 


said his capac- 


agreement with 


| WorldCom brings in $80,000 


per month. That’s equivalent 
to “a lot of collections,” he said. 

The meanwhile, 
insists that it can’t shift fre- 


Pentagon, 


| quencies without paying a high 


Rear Adm. 
deputy 
tary of defense, estimated that 
it would cost $4.3 billion to re- 
allocate all of the DOD’s sys- 
tems operating in the 1,710-to- 
1,850-MHz band to comparable 
spectrum — if it can be found. 
“We have not been very suc- 


Robert Nut- 
assistant 


price. 
secre- 


| cessful in identifying compara- 
reasons of either economics or | 
national security. To give itself | 


ble spectrum,” he said. 
Bandwidth, Nutwell said, “is 
more important to us now than 


it has ever been in the past as 


| Our requirements increase to 
| support network-centric war- 


fare.” The aim is to connect all 
the smart weapons, command 
and control, and intelligence 
systems on a battlefield with 


wireless data links. 


Tom Wheeler, president of | 
Telecommunica- | 


the Cellular 
tions and Internet Association, 


a mobile and wireless industry | 
trade group in Washington, has | 


equally strong views on the 


spectrum reallocation process. | 


billions of 


archdiocese of 


In a letter to Powell in June, 
Wheeler spectrum the 
“lifeblood” of his industry. 
Since the 1,710-to-1,850-MHz 
band has already been selected 
by the International 


called 


Telecom- 
munication Union to support 
Wheel- 


needs to 


3G services worldwide, 
er argues that the FCC 
target it for and 
shift the DOD to other bands. 
Analysts and spectrum con- 
sultants said all of the parties 
involved in the battle 


3G services 


need to 


iH) 


compromise. Roger Schafer, a 


Valley Forge, Pa.-based tele 


communications consultant at 
Schafer Te 


said 


chnology Group, 


a realistic assessment of 
spectrum needs by all the 
rs would bea 


Since 


play- 
good start 

10 MHz of spectrum 
can easily support data speeds 
of 1.5M bit/sec., Schafer main 
tains that the nationwide roll- 
out of a 3G mobile data service 
(with projected speeds in the 
144K to 384K 
can easily be supported by 30 
of the 140 MHz of federal spec 
table. 


could 


range) 


bit/sec. 


trum on the bargaining 
The DOD, Schafer said, 
also meet its requirements 
with 30 MHz of spectrum. Nei- 
ther federal 
effectiv ely 
bandwidth, he said. D 


nor commercial 


users utilize their 


Slicing the Spectrum Pie 


The FCC and the National Telecommunications and Informa- 
tion Administration have sliced the 9-KHz to 300-GHz spec- 
trum into 450 frequency bands, with every bit of space allocated 
for various uses, including the following: 


AM broadcast radio 
TV channels 2-4 
TV channels 2-6 
FM radio 

TV channels 7-13 
TV channels 14-69 


Land mobile, including cellular phones 


Unlicensed use, including wireless LANs 


and cordless phones 
Government, including military 
Cellular phones 


Unlicensed wireless data and 
microwave 


Cellular phones 


Cellular phones, satellite uplinks and 


TV remote trucks 


Fixed wireless 


Mobile satellite service, land mobile and 


fixed microwave 


Amateur radio and unlicensed wireless data 


Unlicensed use, including wireless 
LANs and cordless phones 


Instructional television and commerci 


broadband fixed wireless 


private 


535-1,705 KHz 
54-72 MHz 
76-88 MHz 

88-108 MHz 
174-216 MHz 
470-608 MHz 
806-902 MHz 
902-928 MHz 


1,710-1,890 MHz* 
1,850-1,910 MHz 
1,910-1,830 MHz** 


1,930-1,990 MHz* 
1,990-2,025 MHz** 


2,150-2,160 MHz** 
2,165-2,200 MHz** 


2,390-2,400 MHz* 
2,400-2,483.5 MHz 


2,500-2,690 MHz* 


*\dentified as potential band to support high-speed, advanced mobile data services. 
**On Aug. 9, the FCC added these bands for consideration for 3G use. 





Operator Challenges 
Info Registrations 


Afilias Ltd., which is managing the 
registry for the Internet's new .info 
top-level domain, said it plans to 
challenge some early domain name 
registrations because it suspects 
that they were submitted by cyber- 
squatters. Newtown, Pa.-based Afil- 
ias blamed its inability to prescreen 
registrations on the lack of a global 
trademark database. 


Domino Ties to IBM 
Software Tightened 


Lotus Development Corp. said the 
next version of its Domino collab- 
oration software, dubbed RNext, 
will provide deeper integration 
with parent company IBM’s Web- 
Sphere application server and DB2 
database. RNext is due out early 
next year. It will include the ability 
for Domino applications to use 
DB2 as their primary data source, 
according to Lotus. 


Buy.com Layotf 
Follows Buyout . . . 


Embattled Buy.com Inc., which 
had been the second-largest online 
retailer in the U.S., agreed to a 
$23 million buyout offer from its 
founder. The Aliso Viejo, Calif.- 
based company then laid off 
another 40% of its workers after 
reporting second-quarter revenue 
of $94.9 million, less than half its 
year-earlier total. 


...While Egghead 


Files Chapter 11 


Pioneering online retailer Egghead.- 
com Inc. filed for Chapter 11 bank- 
ruptcy protection and announced 

a deal to sell most of its assets to 
Fry’s Electronics, a San Jose-based 
retail chain. Menlo Park, Calif.- 
based Egghead.com, also laid off 
two-thirds of its remaining employ- | 
ees. The firm said the sale to Fry’s 


Compag Plots C 
For Storage P 


Storage over IP, virtualization seen as key 


| BY LUCAS MEARIAN 


| will take it into the storage- | 
| over-IP arena and lead to the | 
release of a series of hardware | 


at both small businesses and | 
| transport over long distances 
| lysts say the strategy should | 
position the company well to 
compete with rivals in the stor- | 


OMPAQ Computer 
Corp. 
last week a course 
for its future stor- 
age products that 


and software products targeted 


Fortune 500 companies. Ana- 


| age market. 


The computer vendor said it 


| plans to release six new prod- 


| ucts, 
software and a RAID device | 
| (see box). The releases will be 


| Enterprise 


including management 


an expansion of the company’s 


Architecture, which was first 


released in 1998 and includes | 
Fibre Channel-based storage- | 


| area network (SAN) and net- 


work-attached storage (NAS) 
products. 

Analysts say Compaq’s direc- 
tion is impressive for a com- 
pany that three years ago had 
virtually no presence in the 


| enterprise storage sector. 


| and general manager of the | 


Mark Lewis, vice president 


Enterprise Storage Group at 


| Compag, said the first product 
| is a direct-attached storage to 
| Fibre Channel SAN device, or 


| 
| 


| Wright 
| mounted device is targeted at 





should be completed next month. 


DtS. Compaq said the device 
will allow customers with Pro- 


Liant servers or larger NAS | 


arrays to pull their disk drives 


and mount them in a box that | 
| will 


automatically configure 
the data in a RAID format that 
can be accessed through a 


| switched network. 


spokesman 
the new 


Gary 
rack- 


Compaq 
said 


small-business or departmen- 
tal users and is expected to ship 
within two to three months. He 
added that it would be compet- 


announced | 


Network Storage | 





NEWS 


itively priced with the current 
RAID Array 4100 product. 
Compagq said it’s also build- 
ing a series of products aimed 
at sending block-level data, 


| such as that in a database, over 
IP. The products are based on | 
emerging standards that would | 
| ware. In particular, Johnson | 


encapsulate Fibre Channel or 
SCSI commands and data and 
wrap them in IP packets for 


for mirroring, data backup and 
recovery purposes. 

The IFCP, FCIP and iSCSI 
products are expected to be 


| announced by the fourth quar- 
| ter, Wright said. 


Compag said it will also of- 
fer an appliance that will allow 


servers to be configured to ac- | 
cess either file-level or block- | 


level data. 
Lewis also announced that 
his group is shipping a new 


disk array that has Compaq’s | 


VersaStor software embedded 


‘Start-up Tool Measures Net 
Performance to Aid Routing | 


New device said to 
find fastest paths 


BY JAMES COPE 
Networking start-up Route- 
Science Technologies Inc. this 
week plans to announce a de- 


vice that it says will let users | 


analyze the performance of the 
Internet and then update their 
routers to send data to cus- 
tomers via the fastest paths. 
Called PathControl, the de- 
vice performs real-time analy- 
sis of the throughput between a 
company’s network and Inter- 
net users. It will be priced be- 


tween $140,000 and $250,000, | 


| SANs and allow storage to be 


| ship in October. 


| October, according to Route- 
Science CEO Herb Maden. 





ourse | 
roducts 


in its controller, allowing an 
IT manager to gather storage | 
space from various storage 
devices into one virtual pool 
that can then be allocated to 
various users. 
Rob Johnson, an analyst at | 
Englewood, Colo.-based Eval- | 
uator Group Inc., said he is 
impressed by Compaq’s new | 
focus on management soft- | 


said, Compaq’s proposed vir- | 
tual storage software, which | 
would reside in the RAID box | 
and outside of the data path, 
puts it ahead in a race involv- 
ing players like IBM, Hewlett- 
Packard Co. and EMC Corp. 
Each vendor has announced 
or already offers technology 
that will connect multivendor 


| 


collected in a virtual pool. 
Compaq’s VersaStor virtualiza- 
tion technology is expected to 


“They’re focusing on soft- | 
ware, specifically in the area 
of storage management, SAN 


depending on how it’s config- 
ured, and is due for release in 


That sounds like a high price 
to pay, said Larry Rapagnani, 
assistant provost of informa- 
tion systems at the University 
of Notre Dame in South Bend, 
Ind. Rapagnani said he will be- 
lieve San Mateo, Calif.-based 
RouteScience’s claims of a per- 
formance increase of two to 
nine times when he sees it. 

But Maden said the cost 
should be justified for finan- 
cial services firms and other 
large users that hook up with 
customers over the Internet. 


| Network 





Susan Almeida, an analyst at 


Storage Strategy 


Compaq’s announcement 
includes six technologies that | 
would expand its Enterprise 
Network Storage Architec- 
ture product line. 


® A direct-attached storage to 
Fibre Channel SAN device 


= A series of products aimed at 
sending block-level data over IP 


= An appliance that allows servers 
to be configured to access either 
file-level or block-level data 

® A disk array with Compaq’s 
VersaStor software embedded 

in its controller, allowing IT man- 
agers to pool storage space from 
various devices 


= An appliance that connects all 
Compaq servers toa SAN 


§ Software products that will 
automate data security, protec- 
tion and management policies 
(expected to ship in 2003) 


topology management and IP- 
based solutions,” Johnson said. 
“They’re one of the leaders in 
providing that.” 

However, Johnson faulted 
Compaq for not exploiting a 
recently announced coopera- 
tive relationship with IBM in 


| the area of SAN management. D 


Strategy Partners 
LLC in Boston, said perfor- 
mance on the Internet can al- 
ready be enhanced by using 
technologies such as content 
caching tools. But, she added, 
the RouteScience device could 
help companies overcome the 
severe limitations of the Bor- 
der Gateway Protocol (BGP), 
which routers use to connect 
different networks. 

The BGP can’t determine 
the shortest routes between 
endpoints and instead selects 
Internet paths in a somewhat 
arbitrary fashion, said Al- 
meida. PathControl is a “very 
pragmatic” way to deal with 
that problem, she added. 

But what would really be 
useful, Almeida said, is a fully 
intelligent routing protocol 
that could guarantee perfor- 
mance across the Internet, a 
development she described as 
being “still a long way off.” D 
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Florida County Agencies Test Wireless Video Technology 


But corporate uses are years off, uncertain 


BY MATT HAMBLEN 

Motorola Inc. is conducting an 
ambitious wireless trial that 
lets public safety workers in 
a Florida county send color 
videos to vehicles and commu- 
nicate via wireless videocon- 
ferencing links, complete with 
voice and data support. 

A spokesman for the Schaum- 
burg, Ill.-based company said 
Motorola is honing the technol- 
ogy being used in Florida in 
the hope that it will eventually 
appeal to corporate users. But 
anal it could be years 
before real business applica- 
tions are developed. 

Motorola detailed its Green- 


house project this month at a 


| tially see building plans with 


the locations of hydrants and 


| exits, said Marianne Pasha, a 


conference for managers of | 


public-safety communications 
systems in Salt Lake Cit 

part of the project, seven fire 
police and emergency medical 
vehicles in Pinella 
County, Fla., have been out- 
fitted with color touch-screen 
panels that are the size of a 
laptop computer. 

When the screens are fully 
functioning, police officers 
should be able to 
wireless video streams show- 
ing things such as a robbery 
or footage of a missing per- 
son. Firefighters and emer- 
gen 


service 


receive 


spokeswoman for the Pinellas 
County Sheriff's Office. 

“With all the worries about 
school shootings, we have a 
database with maps of schools 


| and the building configura- 


| clude 


| corporate 


tions,” Pasha said. 

But the big question for busi- 
ness users is how they might 
wireless video deploy- 
ments. Applications could in- 
the dissemination 
announcements 


use 


or 


| training materials, said Stacey 


| could get a 
personnel could poten- | field on how to install a part. 


Wu, an analyst at Mobile In- 
sights I in Mountain View, 
Calif. For instance, a mechanic 
uick tutorial in the 


yr tye 


. 
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Wu said a few small vendors, 
including PacketVideo Corp. 
in San Diego and helloNetwork 
Inc. in New York, have talked 
about plans to market wire- 
less video-streaming technol- 
ogy to corporate “But 
they haven’t gotten any trac- 
tion yet,” she added. 

A potential problem is that 
it would take bandwidth of 
at least 250K bit/sec. to pro- 
duce passable video content, 
according to analysts. In the 
Florida trial, the Motorola 
wireless network offers 460K 
bit/sec. of bandwidth in the 
700-MHz public safety band 
under an experimental license 
from the Federal Communic 
tions Commission. 

“No private-sector company 


ers. 


Get WOWea:: at www.crystalpc.com 
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can get access to that [kind of ] 
bandwidth unless they spend a 
lot or resort to a satellite net- 
work,” said Ken Dulaney, an 
analyst at Gartner Inc. in Stam- 
ford, Conn. “I'd say there’s no 
business i 


less 


rest in 
video today.” 

Becky Diercks, an analyst at 
Cahners In-Stat Group in New- 
ton, Mass., said network per- 
formance would likely be di- 
minished in a real-world appli- 
cation with more users than 
the Florida project involves. 

Motorola spokesman Steve 
Gorecki could be 
access to more bandwidth at 
lower costs once the FCC allo 
cates spectrum in the 700-MHz 
and 


said there 


band sets standards for 


usa wireless providers. 
But he added that it’s uncertain 
when the allocation will occur 
for that band, which is 


used by television channels. D 


now 
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BEA Systems Lowers 
Revenue Forecast 


Application server software vendor 
BEA Systems Inc. reported big in- 
creases in revenue and profits for 
its fiscal second quarter ended July 
31. But San Jose-based BEA cut its 
forecast for the next six months due 
to expected weakness in IT spend- 
ing. It said third-quarter revenue 
should be similar to the second- 
quarter level of $267.8 million. 


J.D. Edwards Agrees 
To Buy CRM Vendor 


Two weeks after warning of another 
loss, J.D. Edwards & Co. said it 
plans to buy Youcentric Inc., a mak- 
er of customer relationship manage- 
ment (CRM) software in Charlotte, 
N.C. The deal, valued at $86 million 
in cash and stock, is expected to be 
completed by November and will 
give Denver-based J.D. Edwards its 
first set of CRM applications. 


Comdisco Reports 
$164M 3 Loss 


Comdisco Inc., which is operating 
under Chapter 11 bankruptcy pro- 
tection, reported a $164 million net 
loss for its fiscal third quarter ended 
June 30. That’s compared with 
year-earlier net income of $17 mil- 
lion. The Rosemont, Ill.-based IT 
leasing and services vendor said 
revenue fell from $810 million a 
year ago to $585 million. 


Palm Buying Assets of 
Multimedia Developer 


Palm Inc. announced plans to buy 
the assets of multimedia operating 
system developer Be Inc. in an $11 
million stock-swap deal meant to 
boost the handheld computer mak- 
er’s new stand-alone software unit. 
Santa Clara, Calif.-based Palm said 
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IBM Readies Modular 


| sources, 
| greater scalability of NUMA 


Intel-Based Servers 


With planned Summit chip set, 
users can link processor ‘building blocks 


| BY JAIKUMAR VIJAYAN 


| tems in 


EW SERVER-LEVEI 
chip technology | 
set for delivery 
by IBM in Octo- 
ber could help | 
users run enterprise applica- | 
tions on Intel Corp.-based sys- | 
flexible and 
economic way than current ap- | 


a more 


| proaches allow, analysts said. 


Called Summit, the chip set 
uses a “building block” archi- 
tecture that IBM said will let | 
users buy four-processor Intel | 
servers and then snap on up to | 
12 additional CPUs, plus other 


| components, as their comput- | 


| approach in the Intel world,” 


| lyst at 


| ing needs increase. 


“It’s the first truly modular | 


said Jonathan Eunice, an ana- 
Iluminata Inc. in | 


Nashua, N.H. “This is not 


| meant to be a mainframe killer, | 


| but [it’s] a very hefty midrange 


, 


technology,” he added. 

Intel said it will use the chip 
set to test the enterprise-readi- 
ness of its upcoming 32-bit 
Xeon MP 


server processors 


and the next version of its 64- | 
| accommodate. 


bit Itanium chip, which is due 
out next year. 
Initially, IBM said, Summit 


will join four Xeon MP chips 


together into a basic unit that 
can be expanded to form either 


a single 16-processor system or | 


up to four separate servers that 
share resources (see box). 

IBM officials said the first 
servers featuring the new tech- 


nology should become avail- | 
able late this year, although In- | 
tel indicated that the Xeon MP | 
| chip isn’t likely to be released | 


until early next year. 


Blue Bell, Pa.-based Unisys | 
| Corp. has been shipping a simi- | 
18 | 
| months and said it has already | 


lar system for almost 


AMD Loses IBM as a PC Chip 


Also faces price 
war with Intel | 


| BY LINDA ROSENCRANCE 


| 


IBM has quietly dropped mi- | 
croprocessors made by Ad- | 
vanced Micro Inc. 
from the PCs it sells in North | 
America, dealing AMD a blow 


Devices 


| as it faces the possibility of an | 


| expanded price war with chip 


giant Intel Corp. 


The disclosure of IBM's | 


| move coincided with the news | 
| that Intel will announce a 2- 

| GHz Pentium 4 processor next | 
| week. Intel also is expected to | 


the acquisition of Be, in Menlo Park, | 


Calif., will help it add multimedia 


and Internet capabilities to the Palm | 


OS operating system. 


make steep price cuts in its 
Pentium 4 line shortly, and an- | 


alysts said the combination of | 


events could make it even 


harder for AMD to get its de- 


vices into corporate PCs. 


The loss of IBM’s support 
“won't have a financial or ma- 


terial impact on AMD, but it 


will have a public relations ef- 


fect,” said Steve Kleynhans, an | 
Conn.- | 


analyst at Stamford, 


| based Meta Group Inc. 


Rob Enderle, an analyst at 


Giga Information Group Inc. in | 
| Cambridge, Mass., agreed that | 
IBM’s decision to drop AMD’s 


Athlon processors from. its 
NetVista line of consumer-ori- 
ented PCs creates “an image 
problem for AMD.” 

IBM had offered Sunnyvale, 
Calif.-based AMD’s chips as a 
build-to-order option but dis- 


continued that practice in May, | 


except on PCs sold in Asia. 


IBM spokesman Ray Gorman | 


installed more than 400 of its 


ES7000 servers, which cost up | 
to $700,000 and support up to | 


32 processors in one cabinet. 


Non-Uniform Memory Ac- 
cess (NUMA) servers sold by | 


IBM and rivals such as Silicon 
Graphics Inc. and EMC Corp.'s 
Data General Corp. division 
support far more Intel 
processors than Summit will 


also 


But the three approaches 
differ, Eunice Unisys 
users pay for the modularity of 


said. 
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the ES7000 upfront by buying 
a large box that they can then 
populate with additional re- 
he said. And the 


| boxes comes at a steeper initial 


cost, Eunice added. While IBM 


| wouldn’t comment on its pric- 


ing plans for Summit-equipped 
servers, Eunice they 
should be less expensive and 
more flexible, but 
scalable, than the alternatives. 
Summit will incorporate 
several technologies used now 
in IBM’s mainframes and Unix 
servers. Such _ capabilities 
should help users better ex- 
ploit the computing power of 
chips such as the Xeon MP, 
said Vernon Turner, an analyst 
at IDC in Framingham, Mass. D 


said 


also less 


What's at the Summit 


How IBM’s Summit chip set will work in Intel-based servers 
> Four Intel Xeon MP chips (or eventually 64-bit Itanium 
processors) will be connected by the Summit technology. 


> Scalability ports built into the chip set will let users 
link up to four of the server “building blocks.” 


>» The connected servers could be run either as a single 
multiprocessing machine or as multiple smaller systems. 


>» Technologies from IBM’s mainframes and Unix 
servers will support mirrored memory cards, remote I/O 
management and on-the-fly component upgrades. 


Customer 


confirmed the move last week 
and said the 
made to cut costs and simplify 
the company’s PC product line. 

“Our major business cus- 
tomers prefer [Intel systems],” 
Gorman said. “Because 
profit margin on PCs is so low, 
| it didn’t make sense to invest in 
two chip technologies.” IBM 
will decide what to do in Asia 
at the end of the year, he added. 


decision was 


im - JUST THE FACTS 

50-50 Split 

| Of the top four PC vendors, two 
offer AMD chips in systems and 
two don't. 


IN THE AMD CAMP: 
Compaq, Hewlett-Packard 


INTEL-ONLY VENDORS: Dell, IBM 


the | 





AMD spokesman Ward Tis- 
dale said IBM’s decision was 


| “old news” and chalked it up to 


the computer maker’s exit two 


| years ago from the retail PC 
business in the U.S. The retail 


channel is a strong market for 
AMD’s chips, but the company 
“is focused on growing its en- 
terprise business,” he said. 

Earlier this month, Dan 
Niles, an analyst at Lehman 
Brothers Holdings Inc. in New 
York, said in a report that he 
expects Intel to “detonate a 
price bomb on AMD” by cut- 
ting prices on its Pentium 4 
and Pentium III processors by 
as much as 50%. 

An Intel spokeswoman de- 
clined to comment, except to 


| say the 2-GHz Pentium 4 an- 


nouncement won’t coincide 


with any price cuts. D 


Material from the IDG News 
Service was used in this report. 
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And, with it, an explosion of new data about online 
customers and supply chains. As the world leader 
in data warehousing and e-Intelligence, SAS trans- 
forms this data into the knowledge you need. To 
optimize customer and supplier relationships. To 
reveal unseen opportunities for cross-selling and 
enhancing customer loyalty. Ultimately, making 
your e-commerce operation an e-profit machine. 
For more details on e-Intelligence solutions from 


SAS, call 1-800-727-0025 or stop by www.sas.com. 
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The company 


continues to grow and grow. And your system's transaction rates 


are climbing in lockstep with it. A big deal, for sure—but nothing 


to get anxious about. That’s because SQL Server 2000 offers 
scalability for even the most demanding environments. So you 
know that no matter how much—or how fast—your system needs to 


expand, you'll have the tools to handle it. 


Part of the flexible Microsoft .NET Enterprise Server family, 
SQL Server 2000 recently achieved 20,000 SAP Standard Sales 
and Distribution (SD) Application Benchmark Users with a response 
time of 1.91 seconds on 
a 32-processor Unisys 
ES7000 system running 
as the database server 
in a R/3 4.6C 3-Tier environment, surpassing a result achieved 
with Oracle 8.1 running on a Sun system with 64 processors. 
In addition to world-class performance, SQL Server 2000 has 
price/performance numbers that are 2.5 times better than 
the closest competitor.’ Add to that native XML support in 
SQL Server 2000 and you've got the database that’s ready to 


handle Web-enabled enterprise applications far into the future. 


To get the full story on Microsoft SQL Server 2000 scalability, go to 


microsoft.com/sql/woridrecord 
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PATRICIA KEEFE 


The Past Is Prologue 


FUNNY THING HAPPENED after the PC revolution. The 
clunky beige box, which kicked off a downsizing revolution 


in computing that’s reverberated across two decades, has in 


some ways brought us full circle back to the mainframe era. 


For example, take operating systems 
(particularly Windows), which have 
gotten so bulked up that in some ways 
we seem to be moving back to the fu- 
ture. Microsoft has jammed whole 
classes of tools into its behemoth, 
which now weighs in at 42 million 
lines of code. Shades of mainframes. 

Desktop software has gone from a 
shrink-wrapped floppy disk to billions 
and billions of bits transmitted over 
the Web, paving the way for a return 
to software leasing, only this time we 
call it “rentals” from “service provid- 
Enterprise applications, anyone? 
Those same applications have moved off the local | 
PC onto centrally located and sometimes remote 
application servers. Is anyone else thinking 
“dumb terminals”? The cost of intelligent PCs has 


ers.” 


certainly plummeted to that level. 

The PC pulled data away from the sole owner- 
ship of IT, out of its imprisonment on big boxes in 
the data center, and it gave everyone personal, 
local access and control. Advances in mobile 
computing, however, are leading us right back to 
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corporate and ISP management, as 
data, private e-mail boxes and records 
increasingly are locked up on remote- 
ly located servers, tightly guarded 
behind firewalls and other security 
systems. 

The PC and its laptop and handheld 
spin-offs have freed workers from the 
office, allowing us to be more produc- 
tive on the road and to work from 
home, escaping the confines of the 
corporate cube. The downside, of 
course, is that we’ve also managed to 


lose personal downtime along the way, 


and now many of us are unable to es- 
cape the confines of round-the-clock workdays. 
Today, we’re witnessing the beginnings of the 


| wireless, embedded and ubiquitous computing 


revolutions. Each will creep into the conscious- 
ness of IT much as the PC did. Only this time, if 
we learn from the last installment of computing 
evolution, we'll be one step ahead of the game, 
taking these advancements seriously and plan- 
ning how to grow with and manage these tools 
and their users back to the inevitable future. D 
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PIMM FOX 


| South Carolina 
‘Law Puts IT in 
Disturbing Role 


S AN IT STAFFER, it may be time 

to add a yellow sticky to your 

monitor. No, not another pass- 
word, but the phone number of your 
company’s in-house lawyer. Why? Be- 
cause if a newSouth Carolina law gathers steam in 
other states, you just might be tapped to monitor 
whether your fellow employees are looking at 


| child pornography on their computers. 


The recent case in which the Texas owners of a 


| child pornography site (of- 


ficials claim the company 
had 250,000 subscribers) 
received lengthy jail time 


| 
| should underscore that on- 


line child pornography is a 
serious — and traceable — 


| crime. In addition, 100 


subscribers were arrested. 
The most we can hope for 
is that they accessed the 
site from home computers 
rather than from work. 
That’s because the new 
South Carolina law stipulates that IT pros who 
see child porn on an employee’s computer must 
report the name and address of the owner or user. 

But the law begs the question: Whose responsi- 
bility is it, anyway? 

Are IT professionals like bartenders, who must 
watch the behavior of the people they’re serving? 

Sonia Arrison, director of the Center for Free- 
dom & Technology in San Francisco, says it does- 
n’t make sense to turn IT folks into ethics moni- 
tors. “Going around looking at people’s hard 
drives shouldn’t be the responsibility of IT per- 
sonnel,” she says. “HR, lawyers or people who 
know the law would be better.” 

Most IT personnel are employees, not officers 
of a company, and they’re rarely covered by cor- 
porate insurance. What happens if someone mis- 
takenly reports a worker and is sued for defama- 
tion? Will IT departments have lawyers to deter- 
mine what’s permissible on computers? If you 
outsource IT functions, what happens if an em- 
ployee’s name appears on a third-party computer 
on which illegal material is found? 

Many Web sites grab names to bolster market- 
ing efforts. What if your name, along with a com- 


e 
Quick For more Computerworld columnists and links to 
[Tnk® archives of previous columns, head to: 


www.computerworld.com/q?q1000 
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pany e-mail address, pops up and is found by law 
enforcement officials on a database of a pornog- 
raphy site? Is it the IT department's job to clear 
your name if the FBI comes calling? 

Many banks and investment firms have surveil- 
lance software to monitor e-mail and where em- 
ployees go online. But the South Carolina law 
places the onus on geeks to sniff out perverts. 

IT workers shouldn’t have to police other peo- 
ple’s computers. They aren’t trained to enforce 
the law, they don’t have insurance protection if 
they make mistakes, and they won’t appreciate 
being the thought police. 

Finally, IT workers shouldn’t be held responsi- 
ble for other people’s illegal behavior. Imagine 
being prosecuted as an accessory because you 
knew about child porn on a computer but didn’t 
want to be a rat. D 


JOHN GANTZ 


Looking Ahead 
By Looking Back: 
IT in the Future 


LIENT/SERVER IS A HOAX. Y2k 

won’t amount to much. The Mi- 

crosoft antitrust case will go no- 
where for years. IT departments won’t 
ever effectively manage handheld com- 
puters. The Web will be bigger than anyone thinks. 
The Unix consortium won't make a difference. 

These are a few of the themes I’ve brought to 
the table as a Computerworld columnist. For this, 
my last column, I’ve reviewed some of those I 
wrote over the course of 
nearly nine years to see if I 
can find any messages in 
the past about the future. 
When I started this col- 

umn, the industry was ina 
downturn, Windows NT 
had yet to hit the market, 
and Digital was the No. 2 
computer company. The 
Apple Newton was the 
prototypical PDA, and the 
Internet was still mainly a 


JOHN GANTZ is a senior 

vice president at IDC 

in Framingham, Mass. 
Contact him at 


network used by academics. 

Today, the industry is in a downturn. Digital, 
the company, is gone, and handheld computers 
are almost as numerous as PCs. The Internet has 
created, if not a whole new economy, at least a 
whole slew of new companies, new lingo and a 
new mode of communication and information 
sharing for a half-billion people. 

In hindsight, my best work has been in debunk- 
ing. My general philosophy that anything that re- 


quires major changes in behavior has a dim future 


has generally been proved correct, whether it’s 


the adoption of object-oriented programming 
techniques, computer-aided software engineering 
tools or getting scores of companies to agree on a 
protocol or a standard in advance. I have been 
most wrong when I’ve looked for a radical re- 
structuring of the IT profession. 

Think back. Before the PC, the IT profession 
spent a lot of time trying to foster what it called 
“end-user computing.” 
stream, the profession pretty much tried to pre- 
vent end-user computing. But after the dust set- 
tled, the IT profession had changed from servic- 
ing machines to servicing internal customers. 
The Internet has upped the stakes, but the basic 
job description holds, even if many of the tools 
have changed. 

I once thought that the IT profession would 
disappear, replaced by individuals performing the 
function on a part-time basis and fragmented into 
specialties within business units. But it has actu- 
ally grown more powerful. If you add to the IT 
profession all those systems designers at Micro- 


Once the PC went main- 


messaging and file-transfer 





The PC at 20 


N YOUR COVERAGE of 

the IBM PC’s 20th an- 

niversary (“Crashing 
the Party,” 
Aug. 13], I was surprised 
to see only minimal ref- 
erence to Moore’s Law. 
Bill Gates’ biggest disap- 
pointment with the PC, 
it seems, is the discon- 
tinuance of hardware 
miracles. I passively 
agreed, having already 
been lulled into thinking 
that it was time, after so 
many decades, to give up 
the ancient prophecies 
whose beginnings, I as- 
sumed, were already 
shrouded in mythology. 
was ready to congratu- 
late your editorial seli- 
control when I saw Steve 
Ulfelder’s article “ 
sistor Triumphs” [Future 
Watch]. This article de- 
livered excellent materi- 
al, very well balanced 
and to the point. I recon- 
sidered and was even 
moved to research Gor- 
don Moore’s original 
statements (1965) and his 
own take on this “law.” 
Now I’m all the more im- 


Cover Story, 


Tran- 


| pressed 


| leaf (“functionality” 
| hide behind. 
| Andrew D. Wolfe Jr. 
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soft and Nintendo, those special-effects techni- 
cians in the entertainment world, genomic re 
searchers at Genzyme and Pfizer, technicians 


writing software for laser eye surgery and so on, 


you end up with what, in fact, might be one of the 
most influential professions in the world. 

So, I'll go back to one of my time-honored 
themes: Be ready for the spotlight. If you thought 
your profession was front and center during Y2k, 
just wait. IT may be best known for its errors, 
such as the bugs that shut down stock trading or 
air traffic control and the Love Bug-like viruses 
that spread across the Internet and the news 
pages. But IT truly makes the world go around. 
You'll need the skills and demeanor to handle the 
responsibility. Organizations will need to operate 
with military precision, which means that, except 
for a few designers, you'll need to work from 
common procedures, practices, tools and plat- 
forms. You'll have a more important role but, at 
the same time, less individual freedom. On the 
other hand, you'll be right in the nerve center of 
your company. What better place to be than run- 
ning the ship? B 


aaa 


at his ability to 
extrapolate from so few 


| data points. If you’ll par- 


don the transistor-speak, 
I flip-flopped. 


| Greg Schroeder 
| Web developer 
| New York 


UNCTIONALITY Vs. 
reliability? Who 
feeds you this non- 


| sense? Unix systems run 
| for months on end and 


have been that reliable 
for 20 years, even when 
running on standard PC 
hardware as old as 
80386s. Please don’t give 
Microsoft another fig 

) to 


Applications architect 


| Oracle Corp. 
| Burlington, Mass. 


|The Human Element 


AGREE WITH Mary- 
fran Johnson that 
people can’t success- 

fully be separated from 
| technology [“Zero Toler- 


ance,” News Opinion, 
Aug. 6]. That’s too often 


| what happens, causing 


horrible implementation 
problems. Please know 
that while there are ap- 
parently people outraged 
by your articles, there 
are plenty of others who 
enjoy reading them. 

Lisa Schnettler 

Business systems analyst 
Jersey City, N.J 


OUR EDITORIAL 
hints at far too 
many wrong con- 

notations. Zero tolerance 

connotes no tolerance 
for homosexuals when in 
reality there is no toler- 
ance for the irrelevant re- 
porting of such in this 
newspaper. I stand on the 
same ground as your oth- 
er bigoted, phobic read- 
ers and call for an end to 
such IT-irrelevant report- 
ing and editorializing. 

Rodney Johnson 

Montrose, Colo. 


- An Anti-UCITA Hero 


OW THAT UCITA 

appears to be 

headed back to 
the drawing board 
[News, Aug. 6] and be- 
fore it fades from memo- 


ry, we need to express 
our enormous debt of 
gratitude to testing ex- 
pert and attorney Cem 
Kaner. Often seeming to 
be the only person stand- 
ing up for the rest of us, 
Cem devoted a huge 
amount of his own time 
attending the many UCI- 
TA hearings and telling 
anyone who would listen 
about the dangers of the 
proposed legislation. 
Thanks, Cem. 

Robin F. Goldsmith 


| President 


Go Pro Management Inc 
Needham. Mass 
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DON 


Help Firms Work 
With Suppliers 


AST WEEK, I wrote why corporate 
success will hinge on the ability of 
companies to develop deeper rela- 
tionships with their customers [“Use the Net to 
Invest in Relationships,” Page 28]. This will also 
be true of their relationships with suppliers. 
The most effective managers will be adept at 


rTAPSCOTTI 


marshaling not only the skills and energies of 
their own employees, but also the resources of 
other companies. 

The concept of “relationship capital” is fast 
gaining credence because of the impact the Inter- 
net has on corporate architecture. In the industri- 
al economy, the basic building block of economic 
activity was the vertically integrated corporation. 
This type of company performed virtually every 
function in-house because the cost, risk and has- 
sle of contracting or part- 
nering with outside firms 
outweighed the benefits. 

When these companies 
talked about relationships, 
they almost always meant 
within the firm. There 
were reporting relation- 
ships and dotted-line rela- 
tionships. Project teams 
had “members” who col- 
laborated closely. These 
relationships were often 
carefully defined; you 
were part of the “human 
resource” with roles, re- 
sponsibilities, reward sys- 
tems and the like. 

Sometimes the companies would talk about 
their relationships with customers or suppliers, 
but the expression was virtually meaningless. 
There was a supply chain, but more often than 
not, it was an adversarial relationship. 

But in the era of the Internet, relationships take 
on much greater importance and are becoming 
key assets, much like buildings and factories. Be- 
cause the Net slashes the cost of sharing know]- 
edge, collaborating and meshing business 
processes among corporations, companies can 
now focus on their core competencies and part- 
ner or outsource to do the rest. Together, in in- 
dustry after industry, teams of specialized compa- 
nies working together are proving more supple, 
innovative, cost-efficient and profitable than their 
traditionally vertically integrated competitors. 

I’ve recently worked with Tom Siebel, chair- 
man and CEO of Siebel Systems. One of the 
fastest-growing U.S. companies, Siebel’s revenue 
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| more quickly and cost- 


accordingly. 


soared more than 1,400% in just three years, from 
$118 million in 1997 to $1.8 billion last year. The 
relatively small core company creates software 
products and orchestrates a team of more than 
750 consulting companies, technology providers, 
implementers, suppliers and vendors to take its 
products to the global marketplace. “We only 
have 8,000 people on our payroll, but more than 
30,000 people work for us,” says Siebel. 

The company is often referred to as the market 
leader in customer relationship management soft- 
ware, but Siebel says the company’s scope is now 
much broader. “We are privileged to be the New 
Economy’s prime enabler of ‘relationship capital 
management, ” he says. “The models for business 
success today are not hermetically sealed firms 
but dynamically evolving networks of cooperat- 
ing actors.” 

Such arrangements are a new and formidable 
challenge for managers. The business press con- 


| stantly chronicles partnerships that begin opti- 


mistically and with great fanfare but subsequent- 
ly collapse because the companies involved — 
both often very good at what they do — are 
simply unable to function together. 

In the new business environment, the ability to 
accumulate and gain leveraged returns on rela- 
tionship capital plays a key role in driving busi- 
ness performance and shareholder value. B 


WILLIAM M. ULRICH 


Plan for Transition 


“To Web Services 


NFORMATION TECHNOLOGY is 
leaving the era of custom coding and 
entering the era of Web services. 

If that doesn’t seem like a big deal, consider 


| this: Until Ford exploited 
| the assembly-line model to 


*~ 

mass-produce cars, most 

people didn t own one. BL 

Web services will have as ¥ <P, 
1 

profound an impact on in- : 

formation management as 


| the assembly line had on 
| the auto industry. IT will 


be able to deliver more 
services of greater value WILLIAM M. ULRICH is a 
management consultant 
and president of Tactical 
Strategy Group Inc. Con- 
tact him through www. 
systemtransformation.com. 


effectively — if it plans 


Web services establish 


an environment in which 


developers build systems using reusable compo- 
nents, in stark contrast to writing systems from 


| scratch. Components are self-contained units of 


business logic and data that can be assembled into 


| applications. Components’ owners maintain their 
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functionality. The components are accessible in- 
house or from external sources via the Web. 
A Web services environment streamlines the 


| time it takes to deliver new business capabilities, 
| standardizes results and lowers application man- 
| agement costs. The speed and reliability associat- 
| ed with using standardized components to pro- 

| cess many functions will exponentially increase 


IT’s value to a business. 

Yet transforming IT from a handcrafted envi- 
ronment to a Web services model is a huge chal- 
lenge that will take years because IT has focused 
on handcrafted applications for decades. But with 
requisite tools and architectures beginning to 


| take hold, companies need to deploy a Web ser- 

| vices strategy that recognizes the impact of Web 

| services and drives the needed projects to make it 
| a reality. 


Basic support for Web services is emerging. 


Various vendors offer development tools and 


methods to facilitate the creation of components 


| and the distribution of components and services 
| across Web-enabled architectures. 


But deploying these architectures is just the 
first step toward Web services. Companies must 


| also change the way they address collaboration, 
| governance and legacy systems — and this won't 


happen overnight. 
Collaboration facilitates the reuse of compo- 
nents, but it’s rare. For example, one company had 


| several development teams building components, 
| none of which would share its components with 

| the other teams. This is the wrong approach. A 

| company’s executive team must establish a col- 


laborative work environment and build it into the 


| corporate culture and governance structure. This 


may mean changing how IT works with business 
units, how the units work with one another and 
how a company works with business partners. 
Legacy systems are another roadblock. Hun- 
dreds of billions of lines of legacy code perform 
key business functions, so identifying, extracting, 
consolidating and redeploying them are prerequi- 
sites to building a viable set of reusable compo- 
nents. Legacy componentization will let many in- 
dustries break free of the legacy application ar- 
chitectures that limit new business opportunities. 
Imagine the benefits a phone company could 
realize if it were to capture and consolidate busi- 
ness and data intelligence from redundant billing 
systems and redeploy this functionality as 


| reusable components. Developers could deploy 


valuable business functionality in new, Web- 
enabled applications and provide customers with 
Web access to billing and related information. 
Entire service departments, responsible for, say, 
customer inquiries, could be streamlined or put 
to better use. 

Web services can take businesses to new levels 
of productivity, even when deployed internally as 
a first step. But this will occur only if IT pursues 
a systematic approach to get there. D 
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The Global Challenges 
of Storage Networks 


It may take a herculean effort, but 
the benefits make it worthwhile 
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By John McArthur, 


Worldwide Storage 
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The Global Challenges 
of Storage Networks 


It may take a herculean effort, 
but the benefits make it worthwhile 


f you think managing the design and imple- 


mentation of a storage area network 


for your data center is a challenge, imagine 


the added challenges associated with these 


tasks when the scales have been expanded to 


include the total global enterprise. For those 


who are making recommendations or decisions on a 


global basis, you must consider regional and national 


differences in service level agreements (SLAs) and 


supplier support infrastructures. In addition, you 


must address differences in the size and quality of 


your regional infrastructure. 


Regions will differ in staffing 
costs, the availability of qualified staff 
and training, storage growth rates, 
the types of appli 
cations in use, the 
g é operating systems 
dt and their versions, 
preferred hard 


ware _ platforms 


Lr a 
IDC 


and the deploy 
ment rate of new 
applications. It is 
this wide range of differences that has 
caused many to consider standardiz 


ing on acommon SAN infrastructure 


For sure, however, one size does 
not fit all 

Many IT managers will be reluc 
tant to accept the mandate from some 
distant corporate office. Corporate 
recommendations are most likely to 
be accepted when corporate IT deci 
sion-makers have been sensitive to 
the requirements of the region and 
the proposed solution addresses local 
requirements and concerns. Imagine 
that you are managing a regional data 
center in a locality far from the corpo 
rate office. Imagine that the IT direc 


tor in the corporate office has chosen 


a new way of provisioning and man 
1g storage. What are the chances 
that everyone in the company will 
cooperate fully in the implementation 
and will embrace this new technolo 
gy, especially those who were not 
involved in designing the solution? 
One way to solve this problem is 
to use a set of tools to design and 
implement a storage solution that can 
meet the gl 1ands of the cor 
poration as well as the unique 
requirements of every region around 
the globe. There is one problem here 
these tools are not found in most 


organizations. 


Defining the Business Goal 


Before initiating any major project 
such as a global SAN, it is critical to 
articulate the goal. The goal should be 
expressed in terms of business meas 

ures, not just IT and operational 
measures. The measure of success 
should be grounded in financial met 

rics as well 

For a company considering a glob 

al SAN, the project should begin with 
a thorough assessment of the current 
environment and the costs associated 


with this environment. Too often, 
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individuals have some basic belief 
about inefficiencies or risks associat 
ed with the current infrastructure, 
but rely mostly on anecdotes, lacking 
any hard evidence to confirm their 
belief. This is not sufficient to justify 
the time, effort and expense associat 
ed with replacing the current storag 
intrastructure 

One commonly occurring com 
plaint among SAN solution suppliers 
is that they are frequently asked to 
respond to a technical specification 
rather than being asked to solve a 
usiness challenge 

[hese specifications are another 

son why the storage arena has such 
varied approaches and more than one 
way to create a solution. This is why a 
request for proposal (RFP) that does 
not begin with a statement of the 
business challenge is an inferior RFP. 
Business challenges can typically be 

uced to one or more of the follow 
ing three measures of business suc 
cess: increased revenue, reduced cost 
and decreased risk. Take a look at the 


following three examples 


1. Increase revenue through acquisitions 
Particularly during this period of 
economic uncertainty, companies 
will look to acquisitions as a way to 
row revenue. Stronger companies 
will buy weaker competitors and will 
use periods of imbalance, for example, 
the current economic slowdown in 
the U.S., to enter new markets. A flex 
ible and scalable infrastructure, such 
as an enterprise-wide SAN, is a key 
component of a global-infrastructure 
that can react to and absorb the 
increased IT demands caused by an 


acquisition For exam} 
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ported infrastructure may provide 
data migration and lication tools 
that enable the rapid incorporation of 
acquired data and applications into 
the existing environment 


Reduce costs through consolidation 

Companies that are growing, and 
particularly those companies that are 
growing through acquisition, are 
looking to SAN solutions to reduce 
incremental support costs. The busi 


ness goal is to create a more flexible 


and efficient operation that drives 
cost out of services. Companies in 
this mode are focused on the ability to 
add additional locations and/or serv 


ices without increasing headcount 


3. Reduce risk with application availability 
Business goals that look to reduc 
ing risk are often tied to application 
availability. This can be seen, for 
example, n applications are sup 
porting patient care systems of 
healthcare providers, financial trad 


ing systems and critical utility infra 
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structures such as communications, 
government security and law 
enforcement systems. In these envi 
ronments, the business goal is to 
continuously provide service with 
out interruption. From an IT per 
spective, this means that the storage 
solution may require cluster support 
non disruptiv e maintenance for 
break/fix, software and hardw 
upgrades. In addition, non-disrup 
tive data migration is a key factor in 
the movement of data from aging 
hardware to newer t nology. Data 
is typically written to disk in multi 
ple locations and to multiple devices 
This is a key element in minimizing 
the impact of a data center loss 

Data distribution is also a key com 
ponent in improving the quality of 
service associated with distributed 
Internet server installations 

By placing multiple copies of data 
close to its places of most frequent 


use, Companies can improve the user 


experience dramatically. This is e 


cially important in the areas of graph 
ics content and streaming media 

For other companies, business 
goals are often tied to application 
recoverability. For these companies, 
applications are supporting impor 
tant, but less critical services. 
Examples can be found within power 
utility services or government finan 
cial offices. In these situations, appli 
cation downtime, while disruptive, is 
rarely life-threatening or financially 
devastating. Recoverability in these 
situations is typically measured in 
hours or days and application avail 
ability requirements are measured 
against the cost of providing continu 


ous availability. 
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ate 


On the grand scale there are 
“intents.” An intent is a function con 
ducted by all individuals, all applica 
tions and all computer systems 
Intents are the basic functions associ 
ated with any system 
Communication is an_ intent 
Processing (or thinking) is an intent 
Storage is an intent — it’s something 
we all mus 

What matters less is the technolo 
gy used to satisfy the intent. What 
matters most is that the intent will 
survive regardless of the other activi 
ties of a corporation and regardless of 


changes in technologies 


Evaluating the Stakeholders 

Since everyone is storing information 
efforts to standardize on storage 
architectures will inevitably force you 
to confront the — stakeholders 
Stakeholders are those who are affect 
ed by, influenced by or have the abili 
ty to affect, influence or cont 
decision. In the case of SANs, the 
stakeholders fall into four broad cate 
gories including: financial, business 
unit, operations and suppliers (see 
chart). Here is an explanation of these 


four categories 


|. Financial 

Financial stakeholders include the 
CFO, the business unit comptroller 
and the comptroller or financial man 
ager within the IT department. The 
issues that will be raised by these 
stakeholders can significantly delay 
the implementation of a SAN. For 
example, the issues associated with 
bud may take a full 12 months, or 
until the next budget perioc 


resolve. If these issues are not raised 
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and addressed at the beginning of a 


SAN project, they can bring the best 
designed SAN implementation proj 
ect toa halt 

[he CFO is typically responsib 
for maintaining standards for the 
return on corporate investments 
whether those investments are finan 
cial or infrastructure investments 
The CFO has the ability to slow the 
rate of new technology adoption, pat 
ticularly during times of slow or neg 
ative growth, by demanding that ini 
tiatives with a high upfront capital 
cost provide a higher return on 
inves capital. Thus the project 
manager for a SAN implementation 
must be able to provide a total-cost 
of-ownership (TCO) analysis or 
return on investment (ROI) justifica 
tion for any SAN deployment. Initial 
C pital costs for SAN ploy ments 
will almost certainly be greater than 
the alternatives. Therefore, TCO 
analysis usually extends to the impact 
on personnel costs, software licenses 
ind service expenses. ROI justifica 
tion must include an analysis of the 
financial benefits associated with the 
SAN deployment’s impact such 
metrics as application availability, 
application recovery time and the 
time to deploy new applications 

The business unit comptroller is 
typically concerned with staying 
within operating and capital budget 
constraints and meeting profit tar 
gets. The business unit comptroller 
has the ability to influence a SAN 
decision, because most SAN imple 
mentations typically involve the 
adoption of a shared infrastructure 
Particularly during the early days of 


client/server computing, business 
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units created their own mini-IT 
organizations to support applications 
that were not deemed important 
enough to be supported by the central 
IT organization. As they migrate to a 
shared infrastructure inherent in 


most SAN implementations, the busi 


ness unit comptroller must address 


the transfer of capital budget and 
erating expense from one P&L to 
another. In turn, they must be satis 
fied that the chargeback system asso 
ciated with the SAN implementation 
meets their standards for fairness 
The IT financial manager or comp 
troller Ww ill also be focused on issue 
of budget transfer, chargeback sys 


tems and the total expense associated 
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with a SAN deployment. The charge 
back system is often one of the last 
issues to be addressed in a SAN 
deployment, but from a financial per 
spective it is one of the most difficult 
Typically only one business unit or 
division will bear the cost of a stand 
alone solution. Thus, simple methods 
for cost allocation can be applied 
With a shared infrastructure, 
usage rates, availability requirements 
and growth may vary widely among 
applications. Not all applications will 
share equally in the SAN solution 
Therefore, business units will typical 
ly demand that some fair method of 
chargeback be developed, that is 
based upon usage, growth and avail 
ability requirements. These same 
users may also expect that the cost of 
this shared infrastructure, including 
the cost of the chargeback system, be 
less than the cost that was previously 


borne with a standalone solution 


2. Business unit 

These stakeholders include the 
business unit managers responsible 
for delivering new products and serv 
ices, maintaining good customer rela 
tionships and driving sales. Business 
units not only drive the growth rate 
in existing software applications, but 
also the requirements for new soft 
ware applications. It has been the 
business units, for example, that have 
been behind the implementation of 
customer relationship management 
systems and front office automation. 
In larger organizations, it was the 


business unit, not the corporate IT 


department, that drove the corpora 


tion to e-mail and the Inter 
Over the years, business units have 
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built their own mini-IT departments 
The purpose of this was to experi 
ment with new technology, respond 
more quickly to customer demands 
and to work around a centralized IT 
department that appeared either too 
costly or too disconnected with the 
business units’ priorities 

lications and infrastructures 
that were built within the business 
units often lack the scalability and 
availability features of their data cen 
ter counterparts. But in the early days 
of rapid application development and 
experimentation these factors were 
less important. As the applications 
become more strategic, however, the 
demand for higher availability and 
scalability causes business units to 
“throw the applications over the 
wall” to the IT department. As part of 
passing responsibility for an applica 
tion to the IT department for ongoing 
service and support, the business unit 
will typically demand a service-level 


agreement (SLA) 


IT directors often fear the 
unknown. Previous bad 
experience with “new” 

technology that was over- 

hyped and 
under-delivered lead 
many to cling to old and 
trusted methods. 
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The SLA usually focuses on meet 
ing application availability and per 
formance standards, while ignoring 
the challenges that are inherent in a 
rapidly growing application. The 
SLA is often one of the drivers in a 

ployment, ensuring that the 
IT department continues to meet ap 
plication availability requirements as 
the application continues to grow in 


size and complexity. 


3, Operations 

IT directors often fear the un 
known. Previous bad experiences 
with “new” technology that was 
over-hyped and under-delivered lead 
many to cling to old and trusted 
methods. High initial costs, concerns 
with changing standards, the lack of 
component interoperability, the po 
tential for rapid hardware obsoles 
cence, software compatibility issues 
and recent shifts in supplier focus 
have left them waiting until these 
new storage solutions are more 
broadly adopted 

IT organizations in large, global 
companies have become increasingly 
organized in areas of expertise and 
specialization. Each area may include 
IT operations, hardware capacity 
planning and performance manage 
ment, application development and 
database administration, application 
availability and disaster recovery, 
network management and system 
software support 

Because an enterprise-wide SAN 
touches so many of these con 
stituents, it is critical that their inter 
ests be considered and addressed by 
the SAN project manager. 

en IT departments within 
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business units were developing and 
deploying new client/server applica 
tions, the application, server, storage 
and network decisions were tightly 
integrated as part of a bundled solu 
tion. As these applications increased 
and complexity and were 
turned over to corporate IT to man 
age, the application decisions and 
hardware decisions became incr 
ingly disassociated. By the mid-90s 
companies were making storage de 
cisions independent of server deci 
sions. As this happened, the IT 
groups developed into a food chain of 
service prov iders The server group 
became a service provider to the ap 
plication group, but the storage 
group became a service provider to 
the server group. As storage is in 
creasingly networked, the network 
group may become a service provider 
to the storage group 
With no single point of control 
and every group acting as a service 
provider to another, it is easy to see 
how a SAN 


come a contentious issue unless 


xyment might be 


these stakeholders are incorporated 


in the decision-making process 


4 Suppliers 
Whether it is the business unit 


that previously had responsibility for 


an application or it is one of the IT 


expertise areas mentioned in the pre 
ceding section, it is likely that each 
stakeholder has at least one trusted 
supplier relationship. These suppli 
ers, as key contributors to the suc 
cess of each of the stakeholders, will 
almost certainly have influence over 
the ultimate SAN decision. Storage 


management software suppliers will 
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attempt to influence system software 
support staff, server and_ storage 
hardware suppliers will attempt to 
influence capacity planning and per 
formance management staff, and 
channel extension and SAN infra 
structure suppliers will attempt to 
influence network administrators 
Consideration for existing relation 
ships, contracts and services must be 
given in order to ensure that the SAN 
implementation will proceed with 


out interference and delays 


Assessing the Environment 

The following section explains three 
ways of assessing the current environ 
ments of distributed data centers: the 
infrastructure survey, the efficiency 
and availability assessment and the 
groupware approach to determining 


best practices 


structure survey 
\ typical approach to the assess 
ment of requirements would be to 
conduct a survey of data center man 
in each of the locations 
Questions in the survey might ask for 


a detailed description of the current 


data center storage environment, 
including the current suppliers and 
the storage architecture employed, 
whether SAN, network-attached 
storage (NAS), direct-attached stor 
age (DAS) or internal storage. The 
survey should determine the amount 
of installed gigabytes, data protection 
levels, connectivity, platform and 
operating system support and types 
of applications suppor’ In addi 
tion, the survey would typically 
address growth rate expectations for 
current applications and expecta 
tions for new applications that might 
be deployed. The survey should deter 
mine the demand for increased data 
plication (mirroring, local copies 
and extended distance remote 
copies), the physical constraints of 
the current data center, as well as lim 
itations on power and cooling. A 
more thorough assessment would 
also require a description of the back 
up solution (tape drives and 
libraries), the tape rotation cyc 
application recovery requirements, 
archival requirements and any storage 
resource management software, hier 


archical storage management (HSM) 
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tools and backup and recovery soft 
ware employed 

One major flaw in this approach is 
that there will likely be no reliable 
assessment to the relative merits of 
each of the stated requirements. In 
addition, if a central authority, geo 
graphically distant from the data cen 
ter, is given the task of assessing the 
relative merits of any stated require 
ment, the central authority does so 
without the benefit of local know] 
edge that was captured in the survey 

In times of tight budget control, 
projects that employ a single survey 
to assess the current environment 
and future requirements are more 
likely to reduce the recommended 
solution to the lowest common 
denominator 

Another possibility, when finan 
cial factors are not considered, is the 
specification will become the sum of 
all of the regional requirements or the 
greatest common multiple 

In order to avoid these scenarios, 
IDC recommends that companies 
assess the effect on financial efficien 
cy and data availability delivered by 


various solutions 


2.Efficiency and availability assessment 

An efficiency assessment will 
include all of the questions found in 
the infrastructure survey, but will 
also ask about financial details. These 
will include information on the capi 
tal cost and expense associated with 
the storage hardware and software, 
the age of the current equipment and 
the time until the end of the lease or 
depreciation schedule, or the license 
term in the case of software. The 


expense numbers can be used to 


determine a software and h 

price per MB. The capital cost and 
depreciation schedules are critical to 
determining whether the 

function of the type of equipment 
installed or the age of the equipment 
Rapidly declining hardware prices 
combined with very fast TB growth 
rates could mask the fact a data cen 


ter was purc hasing a costly solution 


Today's high-end storage 


solutions are increasing- 


ly designed to provide 

consistent, predictable 

performance and data 

availability even in the 

event of a component 
failure. 


Current statfing requirements 
should also be assessed and appropri 
ate metrics computed to determine 
the relative efficiency of each of the 
data centers. One metric that works 
for disk storage is TB/Storage 
Manager. This metric is computed by 
dividing the total number of installed 
TB by the number of IT staff required 
to manage the installation, mainte 
nance and problem resolution and 
capacity planning and performance 
management of the storage. These 
numbers can range widely from a few 


TB to tens of TB. A similar metric can 


be computed for tape storage as well 


One metric that IDC has found in use 
is tape cartridges per tape operations 
staff. Using local costs per employee 
you can also derive a personnel price 
per MB or price per tape cartridge 

In order to reach beyond pure 
hardware, software and personnel 
costs, the assessment can also address 
the availability characteristics of the 
current storage infrastructure. In the 
case of disk storage, this can be 
expressed in terms of downtime 
measured in minutes or hours, or inci 
dents, the frequency of downtime 
events. Availability characteristics 
can also be expressed in terms of 
severity (data loss or no data loss) and 
degraded performance, for example 
the data may have been available, but 
the performance was degraded and 
did not meet service levels. In the case 
of tape and tape automation, these 
availability characteristics can be 
expressed in terms of drive or library 
downtime as well as data checks on 
individual tape cartridges 

\t this point, it is worth express 
ing one word of caution relative to 
availability. In the age of increased vir 
tualization, where data is no longer 
associated with any single physical 
location, but rather a logical location 
and is not transferred over any single 
physical path, but rather a logical 
path, it is no longer valid to view stor 
age availability in terms of compo 
nent failure. Today’s high-end storage 
solutions are increasingly designed to 
provide consistent, predictable per 
formance and data availability even in 
the event of a component failure 

\ company that uses the approach 


outlined above will end up with a 
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detailed set of requirements for each 
of the data centers. In addition, the 
project manager will be able to deter 
mine the cost efficiency and impact 
on availability for each of the strate 
gies employed across the locations 
The limiting factor in this approach is 
that the perspective gained comes 
from a single set of constituents: the 
data center managers. As discussed 
above, there are numerous stakehold 
ers in each storage decision. Failure to 
incorporate other stakehol 

cerns may yield a result that is expen 
sive, difficult to support, unable to 
meet service levels or incapable of 
scaling in capacity, performance or 


availability 


roupware approdc h to determining re 
quirements and best practices 
For large projects, and especially 
geographically distributed projects 
such as a global SAN deployment, 
IDC ocates a groupware approac h 
to assessing the environment, deter 
mining best practices, and developing 
the list of requirements. Using a 
groupware approach, multiple stake 
holders in each location can simulta 
neously provide input on storage 
requirements. With added input, 
issues regarding infrastructure hard 
ware and software costs can be more 
effectively balanced against user ben 
efits and labor savings. Using group 
ware, the ability to contribute is time 
of-day and time-zone independent 
Unlike a one-time survey, groupware 
provides an easy mechanism for cor 
recting errors or incorporating the 
latest information. More important is 
the ability of a groupware approach 


to share the collective knowledge, 
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best practices and lessons learned 
among the collective contributors 
Each contributor can see the 
responses of other contributors, and 
can request additional information if 
the responses are not clear, or provide 
a counte rpoint to other contributors’ 
statements on any given question 
The result from such an approach is a 
collection of knowle expecta 
tions and requirements that repre 
sents and addresses the needs of mul 
tiple constituents across multiple 


locations 


Qualifying Supplie 
Developing a global, enterprise-wide 
SAN requirements document is an 
enormous task in its own right 
Selecting prospective suppliers can 
be just as challenging. New SAN 
installations may require new 

storage, new tape and tape automa 


tion solutions, new network infra 


structure, new or different storage 


Business goals d 


The following includes three good examples of business goals used by companies 
that drove recent SAN installations: 


Business goal of a healthcare provider: 


management software, as well as 
training. Few IT d partments today 
have the in-house expertise to act in 
the role of systems integrator for a 
SAN solution. That, however, is p 
cisely what is required. The job of the 
systems integrator becomes increas 
ingly difficult in a global SAN imple 
mentation, since they must determine 
the correct components and suppliers 
for each region 

Even for some of the largest sup 
pliers of SAN solutions, SAN compe 
tency may vary widely between 
regions. In addition, suppliers may 
deliver solutions largely in a direct 
sales-and-support fashion in one 
region, while relying almost exclu 
sively on resellers in another. What is 
required for global SAN deployments 
is a central coordinating supplier 
with global reach and the technical 
expertise to oversee all aspects of the 
installation, including the ability to 


coordinate the efforts of multiple 


ive SANs 


To reduce risk, ensuring uninterrupted, high-quality service to patients, by provid- 
ing a continuous operating environment and a consistent level of performance for 
all critical patient-care-related applications, even in the event of the loss of any 


single data center. 


Business goal of a retail bank: 


To reduce risk, by protecting the assets and information of customers, through 


the provision of a secure IT infrastructure. 


Business goal of a service bureau for resort operators: 
To maintain costs and increase margins, by enabling the integration of any new 
resort location anywhere in the world without increasing IT staff. 
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suppliers within a region and differ 
ent suppliers across regions. Finally 
once the SAN is fully deployed the 
customer will likely require the assis 
tance of a lead supplier to oversee the 
support activities of the other suppli 


ers that contributed to the solution 


Soliciting the Proposals 
Having developed the business goals 
and the statement of functional 
requirements, which will include a 
list of must-have features, it is then 
time to solicit proposals from multi 
ple potential suppliers. In many cases, 
the proposals will go to systems inte 
grators because of their ability to act 
in a vendor-neutral role across a 
broad range of geographies and tech 
nologies. These systems integrators 
may be the services division of a large 
server supplier or storage supplier, o1 
completely independent of any par 
ticular hardware platform supplier 
One critical factor in preparing a 
request for proposal for global SAN 
deployment is to ensure that the 
requirements are limited to questions 
of capabilities and not to questions of 
design. That means that in order to 
ensure the best, most cost-effective 
solution, you should not “over-speci 
fy” the solution, but rather you should 
focus on business benefits. For exam 
ple, it may be a mistake to specify that 
“each hardware component proposed 
must contain no single point of fail 
ure,” since replicating hardware solu 
tions may be a cost-effective way to 
eliminate the risk of hardware that 
contains single points of failure. By 
specifying design, you may cause sup 
pliers to over-engineer the solution 


without achieving the desired busi 
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ness benefit 

Supplier selection, especially in a 
global SAN implementation, will 
almost certainly be a question of com 
promise. No single supplier is likely 
to shine in all factors, across all 
regions, and among all technologies 
Supplier proposal weighting should 
extend well beyond pricing consider 
ations to questions of regional and 
local competency, the range of skills, 
and the completeness of the proposal 

Because SANs touch almost every 
one in the organization, customers 
must look for “one throat to choke” 
when it comes to implementation and 
support. Some disk-focused suppliers 
will have, for example, little or no 
expertise in the area of tape back 
up/restore operations. Tape opera 
tions are a critical element in most 


SAN installations. By the same token, 


many tape suppliers lack real know] 


edge of disk storage systems or net 
working. A supplier that lacks 
expertise In one of the key areas of 
disk, tape, and networking may 
require the oversight of a systems 


integrator 


The Rollout 


Just as with the rollout of a major new 
application, a test-and-pilot 
approach to SAN deployment is war 
ranted. Many suppliers have devel 
oped SAN integration laboratories 
and testing facilities where a pro 
posed design can be tested and 
demonstrated with the client's appli 
cation. Once past the pilot phase, 
most companies will adopt a phased 
approach to implementing SANs 
These installations should begin 


locally, and expand globally 
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The key to success in any technol 
ogy implementation is to remain 
focused upon the business goals 
SANs may provide the capability to 
increase revenue by enabling the 
deployment of new revenue-generat 


ing applications taster 


Conclusion 
SANs may provide the capability to 
reduce cost by making more efficient 
use of storage resources, reducing the 
personnel management overhead, or 
enabling application and server con 
solidation. Finally, SANs may reduce 
risk to the corporation, by providing 
a fully redundant network for infor 
mation delivery and application 
recovery 

Global SAN implementations will 
be fraught with challenges and will 
require an almost herculean effort on 
the part of the project manager. But 
the potential benefits make it an TT 


imperativ eS. 


John McArthur, Vice President 
Worldwide Storage Research, is 
responsible for the worldwide 
research agenda for storage sys- 
tems and for disk, tape and optical 
storage mechanisms at Framing- 
ham, Mass.-based IDC. 

IDC's Storage group offers 
storage research and analysis of 
the storage industry while provid- 
ing knowledge on how to compete 
in this changing economy. 

McArthur can be reached at: 
jmcarthur@idc.com 





Networked storage for 


Bo 


How much did you have in mind? 
_ 


If what you have in mind is unlimited scalability with continuous access to data, then Brocade has 
your solution. It’s called a Storage Area Network (SAN). The enormous growth of bu s information along 
with the need for anytime, anywhere data acc requires a new approach to data st 


A Brocade-based SAN enables your company to seamlessly add storage on demand to meet your ever data storage 


m 
needs. Brocade SAN infrastructure solutions are available from leading system O€Ms and integrators worldwide. 


Improve your data availability with Storage Area Networks. 
Find out how in our new white paper by visiting: www.brocade.com/avail 





Stretching the limits of your data storage systems? 


DS 


eds.com 


EDS Intelligent Storage Services, with the burstable capacity of Liquid Storage™, can tame your most volatile 
e-business flows with confidence, without bursting limited capital budgets. Intelligent Storage Services, offered by EDS 
and other service providers digitally powered by EDS, gives you the storage capacity you need, when you need it. 
Call us at 888-889-1392, or visit us online at eds.com/storage, before your current system leaves you all wet. 





in 2000 
they said... 


“An excellent experience! Thank you! 
| met some good people, discovered 
new products and vendors, and 
learned a lot about what is going on 
in the ¢-commerce space. | also had 
a lov of fun on a beautiful ship i ina- 

| ¥ stimulating environment.” 


Dickson, Vice President, Information Technology, Warner 
er Group, Inc. 


cision makers att 


forssm | 


a richmond event 


“Exe€eptional opportunity to net- 


Work with other ClOs and visit with 


vendors in a relaxed, non-pressured, 
casual, time-focused situation. 


|” 


Excellent! 


Paul J. Bechard, Chief Information Officer, Instron, Corp 


--what will they 
: PY in 2001? 


Computerworld President & CEO 
Alan Guibord to chair The ClO 
Forum — Corporate America 
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We’re making business mobile. See how your business can profit at: www.sbs-usa.siemens.com/mobilebiz.htm 


Are your systems ready for the future? 
ls it safe to make further investments? 
Or are half so obsolete, you might as well start over? 


Questions, questions, questions 


Answer: 


Make your business mobile 


The Internet is breeding ever-new markets and 
technologies. Which ones are here to stay? 
And what's in it for your company? 

Let Siemens Business Services be your guide. 
Whatever the sector of industry, our team of 
over 30,000 experts pools the special resources 
it takes to handle everything from IT consulting 
to complete process design. And we ensure 
seamless integration of your existing compo- 
nents along the way. 

Just say the word and we'll even manage your 
entire system, making sure you always have 
state-of-the-art applications working for you. 
Find out how we can put you in touch with 
tomorrow today. 


Mobile business 








IT shops are finding it’s easier and cheaper to rent IT 


services from ASPs than it is to build or buy. Now 
they just have to know how to pick the right ones. 
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Users $ Speak: 
ASPs Can Be 
‘The Real Deal 


NE OF THE MORE humbling 

things about working at 

Computerworld is the way 

we sometimes research 

and develop an appropri- 
ately skeptical opinion and then 
have it blown out of the water when 
we run it by actual end users. 


Usually, readers tell us we’re being too soft on the 
vendors or listening to the hype too much. But some- 
times they tell us that some hyped-up “innovation” is 
actually useful. 


That’s what happened with application 
service providers, a relatively new breed 
whose worth appeared to be unproven. 


Users told us they like getting the benefit 

of a complex application without having to buy it or 
sign a long-term contract with IBM, EDS or some oth- 
er outsourcing behemoth. A monthly bill, a service- 
level monitor, a quick exit strategy, and you’re done. 
What’s not to like? 

So rather than busting hype, we focused this Knowl- 
edge Center package on the practical aspects of work- 
ing with ASPs and protecting yourself when necessary. 

We mapped the experiences of early adopters, who 
told us they got more out of the deals than they ever 
expected. They also told us how to know when a secu- 
rity ASP is really secure, gave us advice on when hiring 
an ASP makes financial sense and filled us in on the 
flameouts among ASPs. 

By the way, we decided to call these companies 
ASPs, as the users did, just to stay consistent when 
talking about BSPs and MSPs and SSPs and all the 
other SPs. It’s a sanity thing. 

In addition to all that you'll find here in the print 
edition, there are research links, more stories, case 
studies, primers and a host of other resources at 
Computerworld.com. We hope it’s useful. And thanks 
for the reality check. D 


Kevin Fogarty is a Computerworld editor at large. 
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w Access additional Knowledge Center content, 
dm Published exclusively online, at: 

www.computerworld.com/q?k2330 








hp storage disaster recovery 


What it does: It maintains the integrity of your data while 
transmitting it to your backup storage site, even if it’s 
thousands of miles away. 


How it helps: Your data is completely 
and immediately recoverable in the 
event of a disaster. 


How you'd explain it to a clumsy 
antique shopper: Don’t worry about 


the one-of-a-kind Ming vase you 
just dropped, we’ve got another in 
the back just like it. 


hp infrastructure solutions for an always-on business: www.hp.com/go/storagesuccess 
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By filling key gaps in IT; ap- 
plication service providers 


are becoming long-term 
partners. By Mark Hall 


OMETIMES, WHEN you take a 


risk on a new service or tech- 


nology, you get more than 
you paid for. 

Rodric O’Connor discov- 
ered that his customer relationship 
management (CRM) application ser- 
vice provider saved his company an 
unexpected $800,000 a year in paper 
costs, but that wasn’t even the 
best part of the deal. 

Janet Lecuyer learned that by 
adding a step to the approval 
process for new online investor 
education modules developed by her 
ASP, her company actually got better 
and faster results from its vendor. 

Mark Esdale found an entirely new 
market for his business by piggyback- 
ing a new service on top of his ASP’s 

In the experience of these and othe 
pioneering users, ASPs aren’t risky, 
perimental vendors; they're just one 


more mainstream technology option 
for IT shops in both large and small 
companies. 

That sets up the ASPs themselves 
for the explosive growth being predict- 
ed by many analysts, but it also means 
that all IT managers will have to be 
ready for the new reality of the IT 
landscape. They’ll be faced with a 

growing array of options for out- 

sourcing everything from enter- 

prise applications to travel and 

entertainment reports. They'll 

have to develop internal stan- 
dards for ASPs for such things as data 

and prepare to fit outsourced 

applications into ongoing integration 
plans. Finally, ASPs often arrive in a 
company through departmental back 
doors, without IT’s knowledge, much 
like the PCs of old, undermining IT 
managers’ efforts to maintain control 
over IT assets. 


Unex 


AN ASP SAVED Putnam Lovell Securities 
STUUR OOO Mr meee meme Tt] 
costs, but Rodric O’Connor says the 
intangible benefits are even more valuable. 
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As you would expect, the Web- 
dependent ASPs got their share of bad 
press during the dot-com death march. 
Headlines trumpeted the demise of 
high-profile ASPs like Pandesic LLC, 
which hosted e-commerce sites for 
Oshkosh B’gosh Inc. and other online 
retailers, and the major retrenchment 
of others like Xuma Inc., whose online 
application middleware was used by 
dozens of companies. 

But those are minor setbacks in the 
sizzling expansion of this market. 
According to a report published this 


summer by IDC in Framingham, Mass., 


U.S. spending on ASPs will grow to $15 
billion by 2005, up from $770.5 million 
last year. 


Tangible Intangibles 

That kind of astounding growth will 
happen only if users integrate these 
services into the fabric of their IT op- 
erations the way San Francisco-based 
Putnam Lovell Securities Inc. did. 

The investment bank discovered 
that its use of San Francisco-based 
Salesforce.com Inc.’s software cut 
$800,000 from its paper costs after its 
first year in production because the 
company could rely on a single data 
source to contact customers electroni- 
cally, reducing the need to send physi- 
cal mail on a regular basis. 

But O’Connor, vice president of 


ed 
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technology at Putnam Lovell, says he 
likes the service because it helped con- 
solidate customer information from 
nine separate databases. Before the 
ASP service began early last year, that 
dispersal made it nearly impossible for 
one person to always see the latest in- 
formation in every system. 

Now, armed with the depth of infor- 
mation available through Salesforce.- 
com, when Putnam Lovell’s investment 
bankers go into a client meeting, they 
have a comprehensive view of a 
prospect’s or customer’s situation, 
O’Connor says. 

“The intangible benefits are more 
important than the tangible ones,” he 
explains. 

“We had no enterprise record of 
events,” he says. The wealth of cus- 
tomer knowledge is a far greater 
strategic plus to the company than the 
money saved from using the CRM pro- 
gram to automate mailing and printing 
projects inside the company. 

At Charles Schwab & Co., executives 
were struck by the irony that it became 
easier to hit deadlines when another 
step was added to the process of ap- 
proving their ASP’s custom develop- 
ment work. 

Lecuyer, vice president of investor 
e-learning at the San Francisco-based 
financial services provider, said her 
group has worked with Digital Think 
for nearly two years to develop online 
investor software that, while a part of 
the Schwab Web site, is hosted and 
managed by the ASP. In December of 
1999, the company went live with the 
first three modules in its Getting Start- 
ed program for investors. It now has 16 
modules. 

During that time, Lecuyer added a 
pre-alpha testing phase before rolling 
out a new module in order to speed de- 
ployment. Although it’s counterintu- 
itive to think that adding a step would 
help a process move faster, Lecuyer 
says it makes perfect sense. Before the 
pre-alpha stage was added, Digital 
Think, which is located a few blocks 
from Schwab, would show Lecuyer’s 
staff alpha modules and get feedback. 
Sometimes, the change requirements 
at the alpha stage would necessitate 
complex, time-consuming work. By 
adding the pre-alpha review stage, they 
were able to catch the most significant 
changes at a point when making them 
would be far less time-consuming. 

In Scarborough, Ontario, Canada’s 
top computer-aided design integrator, 
CAD Resource Centre, launched an 
online proposal-generating application 
of its own that it could bolt onto an on- 
line sales force automation application 


| 
| 
| 
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[Deciding whether 
to use an ASP is] 
about more than 
cost. You have to 

look at your skill set 
needs and develop 
those that are strate- 
gic and outsource 
what you can. 


MARK MOONEY, CTO, 
HOUGHTON MIFFLIN CO. 


from its ASP, Upshot Corp. in Moun- 
tain View, Calif. 

Esdale, who is president of CAD Re- 
source Centre, which is a division of 
$420 million Rand Worldwide in Mis- 
sissauga, Ontario, said his company 
used Upshot for 18 months and liked 
the service but built another site, 
Quotegen.com, that could overcome 
Upshot’s lack of a proposal module. 

Now, salespeople link Upshot and 
Salesforce.com services to create sales 
proposals within the online CRM and 
sales force automation programs. It 
saves salespeople time and reduces the 
number of errors, since the data is tak- 
en directly from the ASP software. 


Narrower Is Wider 

Naturally, not all of the lessons 
learned about ASPs have been so up- 
beat. Lots of companies have been hurt 
badly by service providers going belly 
up or not being able to expand to meet 
their needs. 

One problem may be that some 
ASPs reach beyond their grasp, making 
promises they have trouble fulfilling. 

“There is a lack of depth” to the ser- 
vices of many ASPs, says Craig Wat- 
son, CIO at FMC Corp., a Chicago- 
based manufacturer of chemical, ener- 
gy and other goods. 

“The problem is that no single 
provider does what we need equally 
well across hosting, network manage- 
ment, secure access, Internet, firewall 
management and SAP processing,” 
Watson says. 

At Boston book publisher Houghton 
Mifflin Co., managers tried to out- 
source some IT help desk operations 
to an ASP to save money. But they 


a1 


brought those operations back in 
house because quality began to suffer, 
says Phil Stice, vice president of infor 
mation and support services. For ex 
ample, Houghton Mifflin uses bot! 
PCs and Macintoshes, but the | 
help desk didn’t have the same level of 
knowledge of both systems 

That bad experience didn’t sour 
Houghton Mifflin on ASPs overall 
Stice says the company has used an 
ASP to run its PeopleSoft application 
for more than 18 months, and success 
there led it to recently move its ac 
count receivables software to an ASP. 

Mark Mooney, Houghton Mifflin’ 
chief technology officer and Stice’s 
boss, says, “We’ll continue to select 
ASPs in areas where it makes sense 
It’s about more than cost. You have to 
look at your skill set needs and devel 
op those that are strategic and out 
source what you can that isn’t.” 

Outsourcing IT infrastructure and 
well-established applications is a key 
and well understood part of the utility 
that ASPs offer IT managers. But nar- 
row-cast, targeted applications for cor- 
porate or divisional use have seen the 


th » ln 
they helt 


most success to date because j 
balance IT’s limited resources with the 
apparent insatiable end-user demand 
for new software and services. 

For example, Ocean Spray Cranber 
ries Inc. in Lakeville, Mass., automated 
travel and entertainment reports with 
Concur Technologies Inc.’s Web-based 
service more than a year and half ago 
Assistant Treasurer Bill McBain says 
that going into the project, he knew 
that “there are always more require- 
ments than there are IT resources.” 

The ASP approach fit the bill. Still, 
McBain says, IT needed to audit Con 
cur’s security and mapped the travel 
and entertainment program to Ocean 
Spray’s SAP system. IT also oversees a 
weekly file transfer between its SAP 
system and Concur’s application. 

However, technical support and ap- 
plication development are all handled 
by Concur. Ocean Spray’s experience 
with the Redmond, Wash.-based ASP 
“will help us embrace more service 
providers,” says McBain. “We have to 

Continued on page 34 
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e Need a quick primer on 
ASPs and how they work? 
www.computerworld. 
. com/q?22415 
m= Reader forums, analysts’ 
expert advice, brokers to put 
you together with your dream 
ASP - everything you need to know about 
checking out and hiring an ASP. 
www. 
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“Linux is so totally dreamy!” 








IBM, the e-business logo and other marks designated ® or ™ are trademarks of International Business Machines Corporation in the United States and/or other countries. Linux is a 











wHy LINUX uas 


MORE FANATICAL DEVOTEES 
THAN A TEEN POP IDOL. 





FIRST THE BRITISH INVASION. 
Now Linus Torvalds. One used mop tops and 
catchy beats to create a worldwide frenzy. The 
other used the arguably less sexy but equally 
effective concept of open standards. When he 
created the Linux” operating system, Torvalds 
opened the gates to a true global software 
meritocracy. With Linux, anyone can share. 
refine and customize code that is freely 
accessible, open and available to all. 

What does this mean for real e-business? 
It means that new e-business infrastructures 
can be rapidly adapted to particular business 
tasks. Companies will no longer be forced to 
adjust their processes to the only software 
available. And since Linux is now the fastest- 
growing operating system, it’s where cutting- 
edge technologies will be created, and where 
the greatest number of programmers will 
appear. Linux is hardware-agnostic, so it can 


quickly begin to remove the cost-intensive 


task of integration across disparate platforms. 
These aren't just software advantages. they are 
real business advantages: reduced costs, faster 
time-to-market, competitive edge and flexible 
e-business infrastructure. 

Now the Linux community has a powerful. 
perhaps even unexpected, ally in IBM. The 
people at IBM are committed to helping 
Linux grow through new technology. devoted 
specialists and active support of the entire 
Linux movement. From across-the-board 
enablement of IBM servers and software, to 
thousands of dedicated developers and 
technical support experts. to porting centers 
where IBM Business Partners can test and 
refine their applications for Linux. [BM is 
backing Linux wholeheartedly. 

It’s exciting stuff. And this is just the 
beginning. So if you think you can keep your 
composure, visit us at ibm.com/e-business 


for more information. 


@ business infrastructure 
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Continued from page 31 
look at our businesses. We are not in 
the [travel and entertainment soft- 
ware] business.” 

ASPs may be able to deliver dramat- 
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| project manager, top managers didn’t 


Nicholas Applegate Capital Manage- 
ment in San Diego, the rollout of Con- 
cur’s travel and entertainment service 
sputtered after two years, with only 


60% of the 450-employee subsidiary of 


give the ASP’s approach their full sup- 
port. As a result, the company contin- 
ues to process more than one-third of 


| its travel and entertainment reports in 


c savings and improved customer ser- 
vice, but they can’t change behavior. At 


Computerworld’s 
Code of Ethics 


news and articles. 
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Computerworld makes prompt, complete correc 
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No secondary employment in the IT industry is permitted 


Our commitment to fairness 


Worbs WE LIVE BY. 


When you pick up a copy of Computerworld, 


vou know you're getting the most objective, 
unbiased news and information in I'l. Our 


code of ethics guarantees it 


Why do we make such a big deal out of 
editorial integrity? 


Because the words you read in Computer 
world often have a dramatic impact on your 
business, your career, and your future. 


You use this information to evaluate new 
products. To get a candid view of emerging 
technologies. To find out the inside story on 
corporate strategies. 10 decide whether to 
jump ship or stay in your current job. To get 


the edge on your competition. 


In short, Computerworld is filled with the 
words IT professionals like you live by. 


Allianz Insurance Co. signed on. 
According to Mel Nutter, systems 
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from network management to reengineering. 
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comprehensive news in IT. 


It's no wonder over 250,000" IT professionals 
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Order today and you'll receive 51 information 
packed issues. Call us at 800-552-443], or 
Visit us on the World Wide Web at http: 
www.cwsubscribe.com. 


You'll get the kind of straightforward, impartial 
reporting you can work by. You have our word 
on it. 


COMPUTERWORLD 


THE NEWSPAPER FOR IT LEADERS 


n data as of 100 


| the old-fashioned, prepaid, paper- 
based system it’s had for more than a 
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decade, despite clear financial advan- 


| tages of using the ASP. 


Nutter says, “The old way of doing 
things was ingrained in our culture for 
15 years.” 

Choosing and, more important, stay- 
ing with an ASP is based on the value 


~ | it brings to the overall business. And in 





| the past three years, the broadly de- 


fined ASP market has found most of its 
success by filling gaps in IT operations 
at companies large and small. 

As FMC’s Watson says about the 


steady uptick of ASP usage in his com- 


pany, “We’ve known all along they 
were important, and their value and 
importance are increasing.” D 


Under 
The Radar 


One key problem ASPs create is that 
because their services are inexpensive 
and don’t require a capital investment, 
they can bring critical IT resources into 
an organization without the approval of 
IT managers. In that regard, the emer- 
gence of ASPs is like the arrival of PCs 
at companies in the 1980s. With ASP 
resources often priced at $50 per user 
per month, business unit managers can 
rent them without IT’s knowledge. 

That was the case at Thomas Cook 
Currency Services Inc. in Toronto. A di- 
vision of, Germany's Thomas Cook AG, 
a global travel services company, 
Thomas Cook Currency Services need- 
ed to automate its sales process but 
didn’t have the resources to develop 
and support a major application. It had 
tried advanced contact management 
software such as GoldMine from Col- 
orado Springs-based FrontRange Solu- 
tions Inc. but found that synchroniza- 
tion issues always made it a problem. 
So it turned to an ASP and skipped IT 
management review. 

“We flew underneath IT's radar,” 
says Michael DeSimone, vice president 
of e-commerce at Thomas Cook Cur- 
rency Services. 

He remembers fessing up to his de- 
ployment of Salesforce.com’s CRM 
software only after learning from an IT 
executive that a global deployment of a 
Siebel application was planned. Given 
Thomas Cook's decentralization, De- 
Simone didn’t have to part with Sales- 
force.com, which his users have come 
to depend on. Also, he says, his upfront 
and ongoing costs to support the 
Siebel application would have been far 
more than the ASP’s hit on his budget. 

~ Mark Hall 
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It’s too hard to hold a security 

outsourcer to a detailed service- 
level agreement, customers say. 
Instead, they're using common | 
sense and caution to keep an eye | 
on things. By Robert L. Scheier | 


N 1989, THEN-PRESIDENT Ronald 
Reagan summed up his view on 
arms treaties with the Soviet 
Union with some famous advice: 
“Trust — but verify.” At least he 
had spy satellites and a treaty to 
work with. But when it comes to 

| security outsourcers, detailed monitor- 

| ing of their work is almost impossible. 





| Users say that the complex, ever- 
changing nature of network security 
threats makes it infeasible to write 

| service-level agreements (SLA) detail- | 
ing what outsourcers should do or 

| what the penalties should be if they 

| let any bad guys through. 

Rather than writing detailed SLAs, 

| some early customers are doing care- 

| ful, upfront evaluations of security out- 

| sourcers and forging close relation- 

| vices with them to ensure good ser- : 

| vice. Many are also outsourcing only ; . — ee 

some security functions until they see _ | ; a a 


Watchinc 
The Watc 
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how well this new service model works. 
“It’s impossible to cover all the de- 
tails in a service-level agreement,” says 
Peter Marchand, head of electronic 
data processing at KBC Securities NV 


a securities trading firm in Brussels. “If 


your aim is to cover all possible issues 
in a service-level agreement, and you 
want compensation for [every possible 
damage], then you'll never sign a ser- 
vice-level agreement.” If an outsourcer 
agrees to such an SLA, its lawyers will 
add so many conditions “that when 
you need it, it will be worthless,” 
Marchand says. 

“If we said ‘No break-ins, how do 
you quantify that?” asks a security 
manager at a Fortune 1,000 manufac- 
turer in the eastern U.S. who asked not 
to be named. “What is a break-in, and 
if it happens, what occurs after that as 
an incident response? It’s difficult to 
really tell what is an attack sometimes, 
and there are new threats constantly 
appearing. We want to be sure they 
perform to a certain level, but we're 
not hung up on the SLA.” 


New Market 

Writing a detailed SLA is diffi- 
cult, partly because security out- 
sourcing is so new and covers 
many different areas. Steve Hunt, an 
analyst at Giga Information Group Inc. 
in Cambridge, Mass., says SLAs can 
cover on-site consulting, remote moni- 
toring of firewalls and the auditing of 
the customer’s internal security ef- 
forts, among other requirements. 

Customers must also consider their 
outsourcer’s viability, according to a 
March report from Stamford, Conn.- 
based Gartner Inc. Gartner expects the 
market for outsourced security moni- 
toring and management to grow at a 
combined annual rate of 31% through 
2005, but it predicts that as many as 
60% of outsourcers will fail or leave the 
business. As outsourcers are bought out 
or acquired, “SLAs and contracts may 
have to go through disrupting revisions 
that may not meet the security needs of 
the enterprise,” Gartner predicts. 








KNOWLEDGE CENTER 


The rapid evolution of security 
threats is leading some companies to 
outsource only Web-facing security, 
keeping more familiar security func- 
tions, like virus protection, in-house. 

As a result, some early customers are 
taking a more relaxed approach, creat- 
ing basic SLAs while outsourcing only 
some of their security needs. 

In April, Alleghany Energy Inc., a 
Hagerstown, Md.-based utility, signed 
a two-year contract with an outsourcer 
to run the intrusion-detection systems 
for its networks and about 125 applica- 
tion servers, says Paul Castellano, Al- 
leghany’s director of IT security and 
business continuity. The utility contin- 
ues to handle firewall protection for 
notebook computers and virus protec- 
tion in-house and is contracting with a 
second vendor to perform periodic 
vulnerability assessments. 

The outsourcer (which Castellano 
declined to name) is responsible only 
for informing Alleghany of attacks, not 
for repelling intruders, he says. For now, 
the only specific element in the SLA is 
a requirement that notification occur 

within 15 minutes of the attack’s 
discovery. But as Alleghany 
learns more about security out- 
sourcing, “we'll probably be 
adding to the SLA,” Castellano says. 

The Fortune 1,000 manufacturer is 
also moving cautiously. Since the 
spring, it has outsourced management 
of the intrusion-detection systems and 
firewalls for its Web-facing systems 
while keeping security for its core sys- 
tems in-house. “We did not want to tie 
down the specifics; we left [the SLA] 
rather broad because we're still in a 
learning mode here,” says the compa- 
ny’s security manager. 

Currently, that SLA requires round- 
the-clock monitoring by the outsourcer, 
broadly describes the systems covered 
and details how quickly the outsourcer 
must respond to an attack, says the 
manager. Rather than include detailed 
requirements, this security manager 
says, he trusts his upfront evaluation of 
the outsourcer as well as his “strategic 
partnership” with the vendor. 

“We’re communicating with the ven- 
dor at the highest levels in their organi- 


zation. We're one of their key accounts,” | 


he says. “We’re integrated very, very 
tightly with their organization. It’s the 
only way we would feel comfortable 
with an outsourced security situation.” 
Since November 1999, KBC Securi- 
ties has outsourced the firewall and in- 
trusicn-detection system protecting its 
customer Web site, the firewall pro- 
tecting its trading systems and the 
public-key encryption infrastructure 


eelin 
About 


Secure 


utsourced 


Security 


Understand clearly which security functions you reed. Don't expect a service 
provider to tell you what you need to know 


Make sure someone on your staff know 


of network security 


vs at least the technical basics 


Don't give all of your security functions to a single se 


fails to perform, you’re left vulnerable 


Agree in writing on what functions the service provider will deliver and how its 
performance will be measured in specific, quantifiable terms 


Consider hiring a qualified third-party security c 


provider's technical expertise and monitor its per 


rmance 


Plan what to do when (not if) your security is breached, whether it’s the r 
of an outside attack, a disaster, a service provider oversight, bankruptcy or an 


attack by a malicious insider 


Don't expect a service provider to offer perfect 
threat, and don't try to write a contract that insists it d 


guarding its customers’ computers. Its 
agreement with security outsourcer 
Ubizen Inc., whose U.S. headquarters 
is in Reston, Va., doesn’t guarantee that 
the site won't be hacked, says Marc- 
hand. Instead, it specifies the hours 
during which Ubizen will perform its 
monitoring, the conditions under 
which it will provide on-site and re- 
mote support, and how quickly it will 
respond to problems. 

Fred Eisenberg, director of informa- 
tion security at Mount Sinai NYU 
Health in New York, is outsourcing the 
authentication and encryption func- 
tions of the group’s Web site to give 
about 700 doctors and nurses access to 
clinical applications. The health care 
provider’s SLA with the outsourcer, 
Seattle-based Aventail Corp., lets it 
escape the contract or receive finan- 
cial remuneration if Aventail fails to 
perform. Eisenberg says that since the 
start of the outsourcing arrangement 
early this year, he’s been totally satis- 
fied with Aventail’s service. 

Some analysts are warning security 
managers that they need to be more rig- 
orous when making the choice to out- 
source security. Gartner analyst Kelly 
Kavanagh says that they shouldn’t even 
consider it until they have experience 
outsourcing other functions and that 
they must understand which security 
functions are most important to their 
businesses. Otherwise, managers could 
end up demanding too much or too lit- 


security against every possible 


because it can’t. 


tle of their vendors. For example, if 
“the SLA calls for four firewall policy 
changes a month, and what they really 
turned out to need are four a week,” the 
customer ends up paying “by the drink” 
for the extra changes, Kavanagh says. 

Other analysts suggest entering SLAs 
that specify how quickly outsourcers 
will change firewall configurations and 
update virus definitions, or even speci- 
fy what security certifications are held 
by the outsourcer’s employees and the 
physical security at its data center. 

But for customers such as March- 
and, it makes more sense for now “to 
focus on major concerns than to try to 
cover all the details and all of the is- 
sues. It could take you more time to set 
up such a service-level agreement than 
to set up the [security] project itself.” D 
Scheier is a freelance writer in 
Boylston, Mass. 
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» Can you count on your 
security service provider 

staying in business? Here 
are some signs to look for 


= Asampling of SSPs. Here's a representative 
(though not complete) listing of security ser- 
vice providers, along with links to their sites: 
www .computerworid.com/q?22276 
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NICHOLAS PETRELEY 


Time to Rethink 


ASP Priorities 


HERE ARE PLENTY Of application service 

providers hosting e-commerce sites, but 

what I want to know is why ASPs aren’t 

taking over many of the most tedious and 
duplicated efforts of IT departments. 


| 
| 





I’m not the only one to see business 
opportunity written all over this mod- 
el. Venture capitalists were drooling 
over ASP start-ups of this sort just a 
couple of years ago. Yet practically 
nothing has emerged in this space. 

Perhaps we'll see a surge of interest 
in the coming year. You couldn’t ask 
for better timing. The ASP model is 
ideally suited to address the single 
biggest black hole to suck down IT 
money and resources, one that’s 
increasing every year. Come on 
— you know what I’m talking 
about. Even the banks in Red- 
mond are changing their signs to read 
the time, temperature and latest Mi- 
crosoft security flaw. 

It doesn’t take a marketing genius to 
picture an ASP advertisement to ex- 
ploit this: “Why pay a large staff to 
chase down and eradicate the latest 
mutation of the SirCam e-mail worm? 
We at ASPirate Inc. can guarantee that 
you will never be affected by e-mail- 
propagated attacks again. Denial of 
service? Not to worry. ASPirate stops 
these network packets from ever 
reaching your organization.” 


What features do you think are 
important to build into SLAs? 


A good service-level agreement is the No. 1 





Going beyond marketing dreams to 
philosophy, the ideal ASP would pro- 
vide customers with all of the tradi- 
tional application services to which 
they’re accustomed: e-mail, document 
storage and management, workflow 
and collaboration, etc. With enough 
bandwidth, the ASP could offer word 
processing, spreadsheets and more. 


Customers would access these services 


over the Internet via a secure virtual 
private network connection. 
Most important, the ASP 
should anticipate that 
smart customers will 
demand a deal that will 
allow them to switch to 
another ASP if they’re 
ever dissatisfied. Without 
competition, there’s no 
guarantee that an ASP will 
be motivated to perform to 
a customer’s satisfaction. 
There's plenty of hard- 
ware and software available 
today that would allow an 
ASP to guarantee secure 
universal access from al- 
most any client platform, 


According to a report from IDC’s 


NICHOLAS PETRELEY 
is a computer 
consultant and author 
in Hayward, Calif. 
He can be reached at 
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confidentiality of data, reasonable per- 
formance and reliable uptime. 

Perhaps the only thing stopping an 
ASP explosion is attitude. Assume that 
you run the IT department under the 
philosophy “Nobody ever got fired for 
...” Today, your employer has decided 
to spin off your department as a sepa- 
rate company, with you as president. 
Your (now previous) employer asks 
you if your new company could pro- 
vide the ASP services I’ve described. 
What would you do differently in or- 
der to meet those conditions? 

Many changes would be optional, 
but I'll tell you one that wouldn’t be: 
You would have no choice but to per- 
suade your customer to adopt a net- 
work computing model for all work- 
related activities. It isn’t difficult to 
guarantee the integrity of the data on 
your servers or near-universal access 
to the data via any browser-enabled 
client. But I know of no cost-efficient 
way to be responsible for the data that 
users store locally on their machines. 

Also, you must insist that users run 
all programs on their machines from 
within the “jail” of an unprivileged 
user context, or perhaps via a properly 
configured Java Virtual Machine. 

Having begun with the premise that 
you live by the status quo, you probably 
realize how difficult it 
would be to convince the 
customer — your employer 
— that this radical shift in 
approach is more important 
than which operating sys- 
tem or office suite you 
choose to use. Worse, some- 
one would have to convince 
the users, which is probably 
why we haven't seen an 
ASP explosion of this type. 
Given that the ASP model 
makes so much sense, per- 
haps it’s time we re-evaluat- 
ed our priorities. D 


Be Careful With Your SLA 


mance of those partners often isn’t 


feature IT managers said they look for in an ASP. 
But what should a good SLA include? 


Disaster recovery 
Penalties for failing to meet standards 


Help desk availability/hours 
(functional support) 


Problem response time 


Help desk availability/hours of 
operation (technical support) 
Application availability 


FRAMINGHAM, MA 
TIPLE RESPONSES A WED 


JURCE. ID 
MUL 


78.2% 
78.2% 


81.8% 
85.5% 


89.1% 
96.4% 


“xSP Advisor” newsletter, customers 
frequently build problem-resolution 
components into their service-level 
agreements (SLA) with application 
service providers. But often, they ne- 
glect to include metrics such as the 
amount of time required to repair the 
service and specific numbers on ap- 
plication performance. 

When an ASP relies on other ser- 
vice providers for network connect- 
ivity or other services, the perfor- 


included in the SLA. 

Another item to note: Problem re- 
sponse and problem resolution are 
two different things, and users need 
to know whether their ASP guaran- 
tees a response or a repair within the 
given time, says Molly Upton, an ana- 
lyst for “xSP Advisor.” For example, 
almost 45% of ASPs guarantee re- 
sponse to critical problems within 30 
minutes, but only 10% said they meet 
that time limit for noncritical problems. 





In e-business everyone wants to unify higher enterprise 
performance with lower total cost. The ES7000 goes further. 


The Unisys e-@ction Enterprise Server 
ES7000 is no ordinary server. It does the 
enterprise-level transactions a ClO 
dreams about. And at a total cost that 
lets a CFO sleep at night. Powered by 
our CMP architecture, the ES7000 
harnesses 32 Intel® Pentium® Ili Xeon 
Processors. Delivering a level of 
performance from Microsoft® Windows 
2000 you'd normally only associate with 
UNIX. Combining scalability, availability, 
and flexibility with all-important 
affordability. That's enough to even unify 
the CFO and the ClO. Which until now, 
was an impossibility. To find out what 
the ES7000 can do for your e-business, 
visit www.aheadforebusiness.com. 
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Users should protect their inter- 


ests — and their data —in case the 
ASP relationship goes bad, say 


legal experts. By 


(OU'VE FOUND AN APPLIC 
vider. You've talked about money, goals 
and partnership, and you’re ready to sign 
up for a long-term commitment. 

But have you worked out the prenup- 
tial agreement? 

Lawyers who represent corporate customers while 
negotiating ASP contracts say it’s important to map 
out an exit strategy to be used if the relationship 
turns sour and ends in divorce. You hope you'll never 
need it, but users must protect their interests — in- 
cluding their data — in case the ASP’s service deteri- 


ATION SERVICE pro- 


orates or it goes out of business. 

The risk is great. Gartner Inc. in Stamford, 
Conn., predicts that 60% of the 500 ASPs that 
existed earlier this year will be out of business 
by year’s end 

Many customers had to scramble when Pandesic 
LLC, a highly touted ASP in Sunnyvale, Calif., ran out 
of gas a year ago. More recently, Alameda, Calif.- 
based security service provider Pilot Network Ser- 
vices Inc. closed in April, abandoning clients such as 
Sovereign Bancorp Inc., The Washington Post Co. 
and Providian Financial Corp. 

San Francisco-based Providian sent several of its 
own IT staffers to Pilot’s Alameda data center to 
work with the remaining Pilot employees to prevent 
disruptions and move to a different contractor 

“It was stressful because we didn’t have a lot of no- 
tice and we had to get in there and scramble to keep 


Pre 
the 


Mitch Betts 


things going,” says Konrad Alt, Providian’s chief pub- 
lic policy officer. 

The path to a less stressful ASP experience begins, 
of course, with diligent research and careful selec- 
tion of the provider before signing on the dotted line. 
It’s important to study not only the IT capabilities, 
but also the finances of the prospective ASP — and 
to treat the ASP as if it were a potential merger part- 
ner during this due diligence phase. 

In the contract, be sure to require a steady stream 
of key financial data from the ASP on a monthly or 
quarterly basis so you can monitor its financial condi- 

tion and spot problems along the way, advises 

Peter C. Quittmeyer, a partner at the law firm 

Sutherland Asbill & Brennan LLP in Atlanta. 

After all, ASP service problems can occur 

for business reasons as well as for technical 
reasons. Service can suffer as a result of under- 
staffing, underpaid staff, faulty procedures, staffers 
distracted by business problems, layoffs or changes 
in business direction, or because the ASP has started 
catering to a new, bigger customer. 

Even an ASP that’s hitting its growth targets can be 
in danger of collapsing if it’s living hand-to-mouth on 
venture capital. 

Quittmeyer says he’s leery of ASPs that are “giving 
away the service at very cheap rates, nowhere near 
close to covering their costs unless they reached 
very high volume levels. 

“If the ASP isn’t making enough money off you, 
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that’s a serious problem. You may have to pay them 
more to get their attention,” Quittmeyer says. In fact, 


| one analyst suggests that big corporate users consid- 
| er investing in their ASPs, both to get priority treat- 
| ment and to help keep them afloat. 


Of course, the core of the ASP relationship is the 
service-level agreement (SLA), which spells out in 


| measureable terms the obligations of the service 
| provider, from guaranteed network uptime to the 


responsiveness of the help desk. 
“Then we try to attach performance penalties” if 


| the ASP fails to meet the service levels — typically a 


credit toward the next monthly payment, says John 


| A. Funk, a partner at Jones, Day, Reavis & Pogue in 


Dallas. “Make the vendor put between 5% and 15% of 


| their monthly revenue at risk for failure to meet ser- 
| vice levels,” Funk says. He advises that the highest 
| penalty be placed “on the things you care most about.” 


And if the ASP fails to deliver important services 
for several months in a row, it’s time to invoke the 


| termination clause in the contract. 


“To avoid becoming hostage to a poorly perform- 


| ing provider, users should require contracts that in- 
| clude an exit strategy,” said analyst Christine Ferrusi 


Ross in a report from Forrester Research Inc. in 
Cambridge, Mass. But an exit strategy means more 


| than just having a termination clause. 


As a practical matter, the termination clause is 


virtually worthless unless the user can quickly hook 
| up with another service provider or bring the data 
| processing in-house. After all, the goal is to keep the 


business function running, not to win legal points. 
The No. | rule in negotiating an ASP contract is to 
retain ownership — and access — to customer data, 
at any time and in whatever format the customer 
requires. 
“If you’re going to pick up and operate somewhere 


else, you need the data,” notes Robert E. Zahler, an 


outsourcing expert at Shaw Pittman LLP, a Washing- 


| ton-based law firm. 


Users should either get a copy of the backup data 


| or make sure it’s put in a vault where “you have the 


are for 
Worst 
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right to physically come and take that data out of the 
vault” if the ASP service is inadequate, Zahler advises. 
But, warns Quittmeyer, “there are vendors that 
condition the return of data on receipt of payment or 
something else, which the user just shouldn’t accept.” 
Of course, the data does you little good without 
application software to process it. Users can request 
a “conversion right” to the software license, in which 
the ASP license is converted to an end-user license. 
Other options include licensing the software di- 
rectly from the software vendor and taking the oper- 
ation in-house, putting the software in escrow, or 
finding another ASP or outsourcing contractor who 
has the same software and signing up with them. 
The contract should also detail the transition assis- 
tance the ASP will provide, including time frames and 
guaranteed uptime. Insist that the ASP provide a 
procedural handbook, too, so a different IT staff can 
make the application work the same way the ASP did. 
The worst-case scenario is for the ASP to go bank- 
rupt. Why? Bankruptcy courts give a fair amount of 
protection to the bankrupt party, so all those great 
contract terms are usually unenforceable and cus- 
tomers are near the end of the line of creditors. 
So choose your vendor wisely. Because once your 
ASP is at the point of bankruptcy, says Funk, “you're 
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| obviously just doing damage control.” 


At that point, legal issues pale in comparison to 


| salvaging the application and data. The best trick is 


to make sure you have a list of the ASP’s key techni- 


| cal people — with addresses and home phone num- 


bers, says Asmita Shirali, a lawyer at the Cleveland 


| office of Jones, Day, Reavis & Pogue. 


But short of an ASP disaster, the far more likely 


| problem is a dispute over what insiders call the three 


Ps: power (electricity outages), pipe (carrier outages) 
and ping (Internet connections). 

In fact, disputes between ASPs and their cus- 
tomers are so inevitable that the industry itself is 
gearing up for more dispute activity. Earlier this year, 
the ASP Industry Consortium in Wakefield, Mass., 
issued a set of dispute-resolution guidelines. 

The industry supports alternative dispute resolu- 
tion, such as arbitration, rather than courtroom liti- 


| gation. Alternative resolution strategies are faster, 


less expensive and avoid jurisdictional disputes, says 
Paula Hunter, chairwoman of the consortium. 
Using an alternative dispute-resolution procedure 


| isin an ASP’s best interests because the proceedings 


are confidential. Bad publicity about a client dispute 


| could be disastrous for a fragile ASP seeking new 
| capital and customers. 


ONLINE EXCLUSIVES 

m Advanced tips on how to make sure your 
service-level agreement with an ASP protects 
your interests: 
www.computerworld.com/q?22417 

= Guidelines on how to prevent and resolve 
disputes with ASPs; a buyer's guide to ASP SLAs: 
www.computerworld.com/q?k2310 


But is dispute resolution good for users? Maybe 


| not, say lawyers such as Zahler and Funk, who repre 
| sent users in outsourcing deals. They say that the 


deck can be stacked against users and that the com- 
plex procedures can be drawn out interminably. And 
the confidentiality of the alternative dispute-resolu- 
tion system actually works against user interests. 
An ASP wants to resolve any dispute as quietly as 


| possible and not have it aired in open court. By 


threatening a lawsuit, the user gains leverage — 


| leverage that can be used to get a settlement — be- 
cause the ASP doesn’t want a lawsuit to hit the news. 


“The threat of having the dispute aired publicly 
will be better than actually having the dispute, in 
terms of getting increased performance out of your 
vendor,” Zahler says. D 


$800 Worth of Legal Advice, Free 


Lawyers who specialize in negotiating with ASPs offer the following tips: 


Peter C. Quittmeyer 
Sutherland Asbill & 
Brennan LLP, Atlanta 


s The contract should in- 
clude financial disclosure 
covenants so the user can 
monitor the ASP’s health. 


= Analyze performance 
indicators such as cus- 
tomer growth, capital- 
raising requirements and 
big-name partners. 

= Establish a transition 
plan that identifies the 
budget, timetable and 
technical requirements 
should you need to 
switch ASPs. 


Robert E. Zahler 
Shaw Pittman LLP, 
Washington 


= Consider having a con- 
tingency contract witha 
second ASP to provide 
data processing on short 
notice if the first ASP 
fails. 

= Be aware that if your 
ASP is acquired, the new 
owner is obligated to 
honor the original con- 
tract. 


= Require your ASP to 
disclose its subcontrac- 
tors. 


John A. Funk 

Jones, Day, Reavis & Pogue, 
Dallas 

= Performance penalties 
should amount to 5% to 
15% of the ASP’s monthly 
revenue. 

= Insist on getting a de- 
tailed procedural manual 
from the ASP in case you 
have to re-create the data- 
processing system. 

= Try to obtain the right 
to bring the data process- 
ing in-house, if necessary. 
And try to have the soft- 
ware source code placed 
in escrow. 


Asmita Shirali 

Jones, Day, Reavis & Pogue, 
Cleveland 

® Call the ASP’s references 
before signing up. Ask how 
they’ve handled peak 
times and how often 
they’ve crashed. 

® Ask the ASP how many 
other contractors will han- 
dle your data and what se- 
curity measures they have. 
= Keep a list of the techni- 
cal people — names, ad- 
dresses and contact infor- 
mation — on your account, 
so you can hire them if the 
ASP fails. 
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l HASN’T BEEN AN EASY year for 

many application service provid- 

ers. Despite a strong forecast for 

hosted services, a glut of vendors 

and the dot-com crash are likely 
to cause further consolidation, say ana- 
lysts. “We will see a greater concentra 
tion of the market in a smaller number 
of players,” predicts analyst Jessica 


Goepfert at IDC in Framingham, Mass., | 


who notes that the top 10 compa- 
nies already own 45% of the mar- 
ket today. 

So who are the winners — and 
losers — so far? To find out, 
Computerworld’s research department 
created two lists: “The Top ASPs” 
(next page) are ranked based on fiscal 
2000 revenue estimates from IDC and 
Stamford, Conn.-based Gartner Inc., 
while the “Failed xSPs” list (below) 
covers a wide range of hosted service 
providers that have gone out of busi- 
ness during the past year. 

Gartner analyst Rita Terdiman 
warns that some companies that are on 
top today could end up on the casualty 
list before the shakeout is over. “We 
see a huge consolidation. Right now 
you've got a billion players with zero 


CUSTOMERS 
Agillion 
Driveway Corp. 
EbaseOne Corp. 


FiNetrics Inc. 


HostLogic Inc. 

HotOffice Technologies Inc. 
iSearch Inc. (Interactive Search Inc.) 
JustOn Inc. 

Netdrive.com Inc. 

Pandesic LLC 

Paradigm4 

Red Gorilla 

Sales.com 

ShopTok Inc. 
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ASP Winners and Losers 


revenue and zero profitability,” Terdi- 
man says. 

The total U.S. market for application 
services last year came to just $770.5 
million worldwide, according to IDC. 
But the total market is expected to 
more than double this year and jump 
to $15 billion by 2005, the market re- 
search firm says. Goepfert says she be- 
lieves the current economic slump will 

actually increase that demand. 
“Larger companies view ASPs as 
a means to reduce their own 
costs,” she explains. 

Just who will stay on top? 
Goepfert says companies such as Elec- 
tronic Data Systems Corp. and IBM 
have the deep pockets necessary to 
succeed. But she also likes niche mar- 
ket providers Surebridge Inc., a Lex- 
ington, Mass.-based company that 
focuses on health care, and Portera 
Systems, a Campbell, Calif.-based firm 
that targets professional services or- 
ganizations. 

The current problems at many xSPs 
have more to do with poor business 
plans and too many vendors than with 
a drop in demand, according to ana- 
lysts. One of the most notable failures 


| 





| 
| 


was Pandesic LLC, which depended on 
a revenue sharing model with its dot- 
com retail customers that “seemed like 
a good idea at the time but didn’t hold 
water,” Goepfert says. By contrast, Red 
Gorilla gave away services and for rev- 
enue relied on advertising that never 
materialized. Still others overspent on 
sales and marketing without regard to 
profitability and simply ran out of 
money when the venture-capital well 
ran dry. 

When an xSP does fold, users don’t 
always receive advance notice or the 
assistance they need to move to a new 
provider. Mike Perini, vice president at 
the Petroleum Equipment Suppliers 
Association in Houston, says he re- 
ceived no advance notification when 
eBaseOne Corp. failed last year. His 
Web site continued to run unattended 
for about a month, he says. And al- 
though he had copies of all applica- 
tions and data, moving the domain 
name was problematic. “Without 
someone to OK the domain change, we 
couldn’t move it,” he says. 

Perini hasn’t soured on ASPs — he’s 
currently running with another ven- 
dor. His advice: “Make sure you have a 





xSPs that are out of business or no longer offering hosted services 


SERVICES OFFERED 
CRM services and software 
Data storage and online file management 


Application infrastructure provider 


Integrated, Web-based financial applications for small and midsize 


companies 


ERP and CRM for vertical markets such as health care and chemicals 


Office services 

Human resources 

Data storage and file sharing 
Data storage 

E-commerce 

Wireless data network services 
Time and expense service 
Sales force automation services 


Online community hosting 
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| contract that they are required to turn 


things over if they go out of business,” 

and duplicate applications and data as 

a contingency. “We were smart enough 
to never have anything over there that 

we didn’t have a copy of over here. So 

we didn’t require anything off the sys- 

tems,” he says. 

Terdiman recommends taking a hard 
look at a prospective vendor’s business 
model and balance sheet. “If they’re al- 
ready profitable, that’s in their favor,” 
she says. But in the current competi- 
tive climate, “there are no sure bets 
here.” D 

— Robert L. Mitchell 


ONLINE EXCLUSIVES 


@ More information, plus 
tools you can use to scout 
out your own ASPs, 
negotiate your own deals, 
protect yourself and keep 
up with the latest ASPs 
have to offer: 


www.computerworld.com/q?k2310 
m Advanced tips on how to make sure your 
service-level agreement with an ASP protects 


your interests: 
722417 


Out of business 
Out of business 
Out of business 


Out of business 


Out of business 
Out of business 
Out of business 
Acquired by Novell Inc. 
Acquired by Visto Corp. 
Out of business 
Out of business 
Out of business 
Out of business 
Out of business 
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The Top ASPs 


Offers enterprise automation and managed application 
services. Focuses on e-commerce, ERP, CRM, 
database and collaboration applications. 


An ASP for health care providers, health plans and 
benefits administrators. 


Offers a portfolio of hosted health care applications 
and consulting services to assist health care organiza- 
tions with the transition toa hosted { application. 


Managed. messaging, ‘managed hosting, Web hosting, 
security services, professional consulting services. 


Specialties include CRM, ERP and e-commerce. 


applications, including security services. 


Hosts IT infrastructure and applications, including 
CRM, ERP, sales force automation and e-business. 


Offers application development and implementation. 


Offers a suite of hosted enterprise application soft- 
ware. Also provides infrastructure for hosting customer 





Offers a wide range of hosted services, including 


ae www ibm.com/services/webhosting — 


Surebridge Inc. 
Lexington, Mass. 
www.surebridge.com 


Electronic Deta Syeiome Corp. 
~~ Plano, Texas 


Interpath Communications Inc. 
Research Triangle Park, N.C. 
www.interpath.com 


Breakaway Solutions Inc. 


Offiers e-business application development and 


Hosts enterprise applications from SAP, Ariba, Inter- “Enterprise 


shop and Siebel Systems Inc. 


Enterprise 
business applications, Web site hosting, infrastructure, 
e-commerce, managed storage, network. 


Enterprise 


Hosts business applications, including e-commerce, 
ERP and CRM, human resources, financial, manufac- 
turing, e mail/collaboration and others. 


Offers a broad range of hosted applications, Web host- "Enterprise. 


ing, integration and consulting services. 


Provides application development: business, Enterprise 
e-business and Web hosting services; managed net- 
work services. 


Enterprise 
hosting. 


Offers Web hosting and a hosted, integrated suite 


of business applications. 


Hosts a variety of application sé services, including finan- 


cials, human resources management, business intelli- 


gence and supply chain. 


Offers application services for professional services 
businesses. 


Hosts e-business applications. 


: Offers Web-based conferencing services. 


A “private label” ASP that provides hosted business 
applications for resale by telecommunications and 
network service providers. 


$100M 


~ $54M 


- $54M 


~ $49M 


“$46M 


$43M 


$27M 


AARP, Coventry Health Care Inc., Cornerstone Brands Inc., Franklin 
Covey Co., Hershey Foods Corp., Kinkos.com Inc., Legg Mason Inc., 
Liberty Financial Cos., others 


~ Healtheare Services Provider, PacificCare Behavioral Health Inc., The = 


St. Paul Radiology, MedPartners inc., Talbert Medical Group Inc., Eye | - 


Clinic of Wisconsin, Providence Health System 


Preferred Health eee McKesson HBOC Inc., Anthem Biue Cross fi S 


Blue Shield, MVP Health Plan, others 


DataCert | inc., Fleetwood Homes Inc., World Book Online 


“ Expanets Inc., Mitsubishi Silicon America, Rochester Institute of Tech- = : 


nology, Redback Networks Inc., DaimlerChrysler AG, Systech Retail 
Systems Inc. 


Macromedia Inc., Excite@home, MadeToOrder.com, Enporion Inc. 


Vertical Networks Inc., Zentropy Partners Inc., Quadrem International 3 1 


Ltd., Hitachi America ‘Ltd. E Elemica Holdings Ltd., others 


Autodesk Inc., eBay Inc., Solvay SA, Techsmart, Akzo Nobel Surface 
Chemistry LLC, Astaris LLC, Bristlecone Inc., Fresh America Corp., 
Frog werk Inc., Linde Lift Truck Corp., others 


"WorldWide Retail Exchange, e2open, Volkswagen AG, Omnexus.com, & 


eHospitalEurope, Rubber Network 


“DefendNet Solutions | inc., -TowerGroup, New York Times Digital, 
Neartek Inc., Quixote Corp., Xcelecom Inc., Global Metro Networks 
Inc., AQM Information Solutions Inc., others 


Charlotte-Mecklenburg Police Department, Chevron Corp., The Dow 
Chemical Co., Dow Sales Administration Services, eFodia LLC, 
_Freedrive Inc. World Savings and Loan Association, others 


American Kennel Club, Bayer Corp., Blue Cross/Blue Shield Associa- 


to, Crain Power and ight Co. ChanDrgStre net, Cooper Tos : 


GmbH, Food Lion, Greenville Utilities, others es: 
Hartford Financial Services Group Inc., Fuji Photo Film U.S.A. Inc., 
Honeywell inc., MIT Technology Review, others 


Rural Cellular Corp.,Unicast, Acta Technology Inc.,.Flash Electronics, = 


MD Helicopters Inc., SC! Cos. 


~ Adatom.com Inc., GroceryWorks.com Inc., Frank Russell Co., 


0-Cedar Brands Inc., University of Texas Medical Branch at Galve- 
_Ston, Sovereign Bank, Vroom Technologies Inc.. others 


AgStar Financial Services, NextPage Inc., Gung-Ho, iQ NetSolutions | 


Booz-Allen & Hamilton Inc., British Telecom, Cedars Sinai Health Sys- fl 


tems, Lockheed Martin Corp.. NetChemistry, OAO Corp.,.Pricewater- | : 


houseCoopers, Raytheon E-Systems, others 


Inc., Preecmeah am ae GoldK, MuseumShop.com, Life- 
AltaVista Co., a ickeaoebe. Wisconsin 
Technical College System, The Charles Schwab Corp., J.P. Morgan 
Chase & Co., UBS PaineWebber Inc., Arthur Andersen, others 


Global Knowledge 
Europe and Beauty Supply Nordic, others 


Consultants, international and Paice Corp., TKT et 
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Even as the number of ASPs is dwindling, cus- 
tomers are demanding a wider range of services. 
But can ASPs deliver? By Mathew Schwartz 


UNDREDS OF DOT-COMS have | rana, chairman of Surebridge Inc., an 


failed in the past year, and 
many observers assumed 
that the ASP business mod- 
el, by virtue of being hyped 
along with the Internet 

| start-ups, would die with them. It’s true 
that the number of application service 

| providers, many of which emerged two 
years ago in the midst of the economic 
boom, has declined sharply since Fram- 
ingham, Mass.-based IDC reported a 
peak of 800 last year. But surviving 
companies say that they’re seeing cus- 
tomer demands for increasing numbers 
of services. 

And IDC actually predicts that the 
ASP market will grow 89% per year 
| during the next five years, with world- 
wide revenues rising from $986 million 
last year to $23.9 billion in 2005 (see 
chart, page 55). But with new players 
|} continually entering the market, no 
| one is safe — not even the current 

leaders. “The top 10 can’t rest on 
their laurels,” says IDC analyst 
Jessica Goepfert. (See “The Top 
ASPs” chart, page 43.) 

Surviving ASPs face the challenge of 
scaling up to provide more types of 
rapidly delivered, standardized imple- 
| mentations while still maintaining high 
| uptime and service levels. 

Competition should be good news 
for IT shops that use ASPs. But so far, 
| “I know from colleagues that their ASP 
experiences have been mixed,” says 
Mitchell Dickerman, CIO at Boston- 
based advertising agency Hill, Holli- 
| day, which has current billings of about 
$1 billion. “Of those [ASPs] that are 
surviving, the key differentiator and 
| thing that will keep them in business is 
| not the technology they’re offering, but 
their levels of service.” 

ASPs will also be sustained by offer- 
ing more services, says Pradeep Khu- 





ASP in Lexington, Mass. “It’s always 
been part of our strategy to add ser- 
vices and value to our customers over 
time, especially now that they’re look- 
ing at cutting costs and asking us if we 


| can take on more of the services that 
| they used to host in-house,” he says. 


Surebridge’s business model is to be 


| a one-stop shop, especially given what 


Khurana sees as an increasingly CFO- 


driven demand from customers for 


more outsourced applications. “Addi- 
tional services are really ours to lose,” 
he says. 


Skills Search 


Talent concerns are also driving the 


| use of ASPs, says Jan Jackman, vice 


president of strategy for next-genera- 
tion businesses at IBM, which has an 


| ASP business. 


“Overall, there’s a skills shortage, 


| and a lot of companies don’t have the 
| capability to integrate a lot of these 


Web-based applications,” she says. 


| “LASPs] are a way for them to get to 
market faster and to test out these new 


value-added services, as well as to see 
if it brings new customers to them. If 
you’re comfortable with the service, 


| you might stay with it.” 


Hill, Holliday chose an ASP two 


| years ago because it didn’t have the in- 


house expertise that it needed to run 
its PeopleSoft modules. Surebridge 
now hosts the advertising agency’s 
time and expense software modules 
from Pleasanton, Calif.-based People- 


| Soft Inc. 


“It cost me less to hire Surebridge 


| than it did to hire someone with Ora- 


cle experience,” says Dickerman, who 
would have needed to hire three full- 
time people with Oracle database ex- 
perience to run the modules. The time 
system, which has been up for a year, 


MO MMM OR mela eu 
says the key differentiator for ASPs “is 
not the technology they're offering, but 
NU mh ee) ea ee 


and the expense system, which was 
launched four months ago, have had 
“absolutely no downtime,” he says. 
Dickerman says he’ll also use Sure- 
bridge next year when he adds busi- 
ness intelligence software from 
Ottawa-based Cognos Inc. “They have 
| the expertise, and they can add it to 
the box or add another box for a mini- 
| mal increase in price,” he explains. 
The promise of lower costs led Vic- 
tor Inglese, global IT project manager 





Fewer ASPs 
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at DaimlerChrysler Capital Services in 
Norwalk, Conn., to select an ASP to 


run his new SAP installation in January 


of last year. 

“We found it would save us much 
more money to do it externally. We’ve 
also limited our exposure on turnover 
and also on the cost of hiring people,” 
he says, adding that he’s pleased with 
the service levels and uptime. 

Inglese uses Denver-based Qwest 
Cyber.Solutions LLC to host and man- 





age his SAP enterprise resource plan- 
ning applications. He, too, says he 
plans to continue to rely upon the ASP 
for more services as he adds SAP mod- 
ules in the future. 

Using an ASP can also help IT man- 
agers get new applications into the 
hands of their business users more 
quickly. In her talks with ASP users, 
Goepfert says, “What I hear time and 
time again is that they want the cut- 
ting-edge application environment, 





and if IT is not their core competency, 
they don’t want to have to spend the 
time and money to develop that in- 
house, so they look for an ASP to help 
them do that.” 

“Time to market — that’s always 
why we want to go with an ASP,” says 
Chris Farmer, director of global trans- 
action systems at San Rafael, Calif.- 
based Autodesk Inc., the maker of 
AutoCAD software and digital design 
applications used by movie effects 
houses. It’s quicker because ASPs have 
dealt with the new technology before, 
he says. And though Farmer doesn’t 
charge users for internal applications, 
he does pass on ASP costs, and ASPs 
charge more for customizations. That’s 
a good thing, he says, since simpler ap- 
plications get to market faster. 

“Our internal customers are far 
more likely to accept a vanilla solution 
when it comes from an ASP, whereas 
when it comes from our internal re- 
sources, they’re far more likely to want 
to customize the hell out of it,” says 
Farmer. 

Nineteen months ago, Autodesk be- 
gan using three ASPs: Cupertino, 
Calif.-based BlueStar Solutions Inc. for 
its SAP installation (notably, a single- 
instance installation over three loca- 
tions and in multiple languages); San 
Francisco-based Salesforce.com Inc. 
for managing major sales accounts; 
and Emeryville, Calif.-based Evolve 
Software Inc. for managing its consul- 
tants’ time sheets and projects. 

So far, so good, says Farmer, and 
though he sees the ASP market consol- 
idating, he says he doesn’t feel the 
need to use just one ASP for all out- 
sourced applications. “I think we'll 
play it by ear. We’re always extremely 
interested in finding a point solution 
from an ASP to a business problem,” 
he says. 

Next year, Farmer says, he wants to 
automate higher-level reporting from 
other applications back to SAP, with 
half the work handled internally at 
Autodesk and the other half done at 
BlueStar. In the future, he says, he’d 
like to move the electronic-procure- 
ment software from Sunnyvale, Calif.- 


4) 


based Ariba Inc. that his company uses 
to an ASP such as BlueStar. 
DaimlerChrysler’s Inglese is opti- 
mistic about using ASPs. In the future, 
he says, he wants to “get my entire en- 
vironment hosted” 


es managed. “If I could, I would not 


and in some cas- 


have anything in-house,” he adds 


Making the Right Choice 


Of course, choosing the right ASP at 
the outset is a critical success factor. 
When evaluating ASPs, Inglese looked 
for a one-stop shop, stability and a 
depth of SAP knowledge. One shop 
hosting many of his applications would 
give Inglese only “one throat to choke” 
should the need arise, he says. 

He chose well. Of the other vendors 
he seriously evaluated 19 months ago, 
“one is not in the business of SAP host 
ing, and another has gone through a 
downturn and changed its name 1,000 
times,” he says. 

In case their ASPs fail, Farmer and 
Dickerman purchased all of their host 
ed applications’ software licenses. As 
an added safeguard, Dickerman also 
bought the Oracle boxes his software 
runs on in the Surebridge data center 

Perhaps the best way to keep ASPs 
accountable and service high is, like so 
many things, through proper manage- 
ment. Farmer says that rather than 
leaving ASPs “to their own devices,” he 
actively manages them. 

“We're treating them as an integral 
part of our systems infrastructure, so 
we manage them like we would our in- 
ternal services,” he says. “Because the 
ASP should be transparent to the end 
user; they shouldn’t know.” D 


ONLINE EXCLUSIVES 


w Find research links, more 
stories, case studies, primers 
and other resources at our 
ASP Knowledge Center. 
www. 


/q?%2330 


» More information, plus tools you can use to 
scout out your own ASPs, negotiate your own 
deals, protect yourself and keep up with the latest 
ASPs have te offer. 
www.computerworld.com/q?k2310 
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xOP Security 
Requires Client 
Participation 


If you don’t put any effort into devel- 
oping a security model with your 
xSP, you're wide open for trouble 


BY VINCE TUESDAY 
N MANY YEARS OF work- 
ing in financial services, 
I’ve often been on the re- 
ceiving end of various 
kinds of service providers 

(xSP). I’ve reviewed xSP com- 

panies to make sure they meet 

my company’s security stan- 
dards, and I’ve argued to pre- 
vent my role from being taken 
over by a security service 
provider. 

I’ve always found that 

xSPs don’t communicate 

well with clients and de- 

liver confused, low-qual- 

ity service that often lags be- 

hind my company’s changing 

business environment. 
Recently, my company start- 
ed offering its services to oth- 
er financial services compa- 
nies. This experience has 
shown me that the problem 
with xSPs isn’t the providers 

— it’s the clients. Clients 

choose to use xSPs for all the 

wrong reasons and at all the 
wrong levels. They keep 
changing their minds about 


what services they require and | 


how they want them deliv- 
ered. As a result, they incur 
additional costs and hassle 
that could have been avoided 
by simply having had clear 
and consistent requirements 
at the start of the process. 

To be fair, the fault really 
lies with both the xSP and its 
clients. Given that most of the 





methods used to select an xSP 
are arbitrary and illogical, it 
isn’t surprising that many xSP 
relationships don’t work out. 

So, where does security fit 
into all this? In the past, I’ve 
hassled xSPs to ensure that 
they protect our information 
as well as, if not better than, 
we do. In the process, I’ve un- 
covered some disturbing situ- 
ations. For example, one xSP 

had installed its Inter- 

net firewall the wrong 

way around. It was al- 

lowing all inward con- 

nections but blocking 
many ports from going out 
onto the wider network. 

Even when we're the ones 
providing a service, it’s hard to 
get security right. A customer 
recently rejected, for cost rea- 
sons, a private network line 
that would have delivered the 
results of our data processing. 
It demanded that data be deliv- 
ered over the Internet via a vir- 
tual private network (VPN). 
The data was of high value, so 
we wanted to use a system 
with high security. We were re- 
lieved to see that the compa- 
ny’s preferred approach was 
to use triple DES to protect 
the data in transit. Someone 
e-mailed us the VPN software 
to configure the system, which 
we were happy with until we 
noticed that the same e-mail 
contained the password that 
secured the entire connection. 





Sending the key material 
in plain text over the Internet 
is bad, but realistically, the 
chance of an attacker manag- 
ing to snoop that e-mail and 
work out what system the 
password relates to is low. 
E-mailing passwords isn’t a 
great idea, but there was a 
worse security risk: The pass- 
word in the e-mail consisted 
of a single character. Before 
everyone writes in to com- 
plain, let me be clear: I’m not 
suggesting that e-mailing a 
password is right — of course 
it isn’t. But picking a bad pass- 
word is much worse. 

Most encryption technolo- 


we 
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This Week's 
Glossary: 
Data Encryption Standard 
(DES): This U.S. Department 
of Defense encryption method 


used to be the industry stan- 
dard. It has since been super- 


ceded by the Advanced Encryp- 


tion Standard (AES), but it’s still 
widely used in the financial ser- 





gies employ a user-entered 
password to generate the key 
used for the encryption al- 
gorithm, so an encryption 
implementation is only as 
strong as the password cho- 
sen. A one-character password 
could at best be 8 bits of secu- 
rity, and anyone can break 8- 
bit encryption with a pencil 
and paper. 

In fact, the situation is even 
worse than that. ASCII might 
use 8 bits to represent each 
character, but English contains 
enough redundancy that nor- 
mal text only contains 1.3 bits 
of randomness per character. 
It’s possible that a well-chosen 
single character of lowercase 
text might be five bits of ran- 
domness. This is one of the 
many reasons why a dictio- 
nary-word-based password or 
pass phrase is a bad idea. 

Given that anyone could at 
any time start trying to guess 
the keys to gain access to the 
VPN, it really wasn’t an appro- 
priate password. 

At least we can steer our 
customers toward the light, 
in terms of configuring soft- 
ware, but the help they ask 
for doesn’t stop there. 

A vital part of any xSP con- 


: introduction in 1998 of the X9 
standard, which improves de- 

: Crypting and encrypting by us- 
ing three keys. X9 increases the 
: key length from 56 to 168 bits 

: while maintaining backward 

? compatibility with DES. 


Links: 


www.xspsite.net/: Need 


: the background on various 

: categories of service providers 
: but don’t know what a WSP or 
: evenan HSPis? This Web site 
? canhelp. 


: http://csrc.nist.gov/ 

: encryption /aes/: This gov- 

: ernment Web site gives the low- 
: down on the new AES encryp- 

? tion standard 


www.eff.org/descracker/: 
The San Francisco-based Elec- 


: tronic Frontier Foundation 
? demonstrates how easy it is to 
vices arena, particularly with the : 


break a single DES. 
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tract is the service-level agree- 
ment (SLA). The customer 
needs to be closely involved in 
agreeing to the terms of the 
SLA. That way, they get what 
they need from the contract 
and won't want to renegotiate 
once they have experienced 
the service. 

A customer of ours recently 
requested a security section in 
the SLA but didn’t have any 
idea what it wanted covered 
— “Oh, you know best; you 
tell us what we want,” was its 
best draft for that section. 

So now we face a clear con- 
flict of interest. We want to 
provide a good service. We 
want to impress the customer 
with the level of security we 
can provide. Yet we want to 
provide cost-effective services 
that are easy to manage. Also, 
we don’t understand the com- 
pany’s business model and the 
threats it faces as well as its 
own people do. They need to 
be the ones who decide what 
level of security makes sense 
for them. 

We need to complete the 
SLA process as soon as possi- 
ble so contracts can be signed. 
Therefore, we can’t patiently 
walk them through the pro- 
cess, gather all of their input 
and agree on a security system 
that meets their needs. 

Instead, we’ll be forced to 
throw together a bare-mini- 
mum security solution and 
hope they accept it. Without 
customer input, we have to 
put other priorities ahead of 
their needs. We know this isn’t 
perfect and have highlighted 
the risk, but those negotiating 
aren’t interested in security. 

My initial experiences on 
the other side of the xSP/cli- 
ent divide have given me a 
new perspective on the whole 
process. Now when I deal 
with our xSPs, I focus on com- 
municating our needs and pri- 
orities clearly, to make all of 
our lives easier. D 


8 This week's journal is written by a real security manager, “Vince Tuesday,” whose name and employer have been disguised for obvious reasons. Contact him at vince.tuesday@hushmail.com or go to the Security Manager's Journal forum. 














Mes Rs h@o em ere CCl las) 


are registered trademarks of International Business 






and/or other countries. 





Oygaly 


22 Shhh WAS as 


e _ a 


THE DAY THE DATABASE WORLD DIDN’T STAND STILL. 


WELCOME INFORMIX. 


GOOD NEWS FOR CUSTOMERS, PARTNERS AND BUSINESS. 





DB2 and the rest of the IBM software family welcome Infor 


IT’S A DIFFERENT KIND or WORLD. 
YOU NEED A DIFFERENT KIND or SOFTWARE. 









48 


by, but here 


into your decision. 


HEN CHIEF FINANCIAL Of- | 


ficer Craig Kinyon decid- 
ed to outsource much of 
Reid Hospital and Health 
Care Services’ financial 


and materials management programs in | 


the fall of 1999, the application service 
provider market was taking off. 

But despite the abundance of excit- 
ing, young companies with trendy new 
offerings, Kinyon made sure he chose a 
well-established vendor that would 
ensure that the hospital would reap 
both its short- and long-term return- 
on-investment goals. 

“Your don’t want a ‘Dear John’ 
letter from your ASP a year and a 
half into the relationship,” says 
Kinyon. 

A vendor’s stability isn’t the 
only criterion in calculating whether 
it’s cost effective to hire an ASP, but in 
a market so young and unproven, it’s 
even more critical than in most IT 
deals, Kinyon says. 

There are no equations that will ab- 
solutely determine whether an ASP 
can meet your ROI goals. But there are 
steps you can take to reduce your risk. 

The first is to actually look at long- 
term ROI, a step many user companies 
skip in favor of evaluating the technol- 
ogy or business function that interests 
them, says Chris Ambrose, an analyst 
at Gartner Inc. in Stamford, Conn. 
However, as the economy tightens, 
more IT directors are finding them- 
selves in front of CFOs or boards of 
directors justifying existing programs 
and previous purchases. 

“[Businesses] don’t have a good han- 
dle on what [application services] are 
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When Does 
An ASP 
Pay Off? 


Precise ROI formulas are hard to come 


are some of the factors to work 


By Michele Netto 


costing them today. Even existing users 
can only guesstimate what they were 


| spending before implementation [of a 
| new ASP],” 


says Ambrose. 

Kate Murphy, an analyst at Boston- 
based AMR Research Inc., suggests 
that companies ask the following key 


| questions to determine a realistic ROI 
from the start: 


1. What staffing and salary costs will your 


| business incur by hiring an ASP? This 


should take into consideration both 


| the training levels and the number of 
| employees you would have to hire to 
implement a new application through 


an ASP, or the number of em- 
ployees you could avoid hiring 
by contracting with an ASP to 
do the work. 

2. How do the capital (infrastructure 


| and hardware) and opportunity costs com- 
| pare? Determine what it would cost 

| your company to buy the server, soft- 
| ware and infrastructure, compared to 


the cost of the ASP. 
3. Where are the hidden fees? Chances are 


| they’re there whether you're licensing 
| software or paying a subscription fee. 
| Find them upfront, and you won't be 

| surprised down the road. 

| 4. Anticipate ongoing changes and modifi- 


cations. Find out what's included in the 
package deal and what's likely to be an add- 
on. Do you need the more costly bells and 
whistles from the start, or can you buy vanil- 
la and add on as you grow? Now that Reid 
Hospital is almost two years into its 
contract with Siemens Medical Solu- 
tions Health Services Corp., which 

is hosting Reid’s Lawson Software- 
based applications, Kinyon says it costs 
him less to outsource the applications 


| at the bottom line,” 





than it would to maintain the system 
in-house. 

He said running the programs in- 
house would have required a database 
administrator and at least three IT pro- 
fessionals who could ensure round- 
| the-clock support. In addition to salary 
and training costs, finding high-quality 
IT professionals and relocating them 
to the hospital’s Richmond, Ind., head- 
quarters would have been a time- 
consuming and costly proposition. 

Before signing on with Siemens, 


| Kinyon and his team visited the com- 


pany’s data center in Malvern, Pa., to 
see how and where the data is housed. 
“When we looked at their high 
security, actual structure of the build- 
ing and sophisticated monitoring 
of file servers, we realized it would 
be difficult for us to replicate that,” 
Kinyon says. 
Even Henry Hardin, co-founder, 


| president and CEO of SCI Cos., an 


Atlanta-based human resources ASP, 


| hired another ASP to host his Web- 


based e-commerce, help desk, e-mail 
and other systems because it was too 
costly to do it in-house. 
“Tt all comes down to the value: Is it 
cheaper to buy or rent?” Hardin says. 
Anticipating the hard-dollar ques- 


| tions, some vendors are coming to the 


negotiating table with their own cost- 


| analysis programs. 


“The way the economy was a year 
ago, you could do these kinds of calcu- 
lations on the back of a napkin. Now, 
CFOs are looking much more closely 

” says Tom Brennan, 
vice president of marketing at Bedford, 
N.H.-based ASP ManagedOps.com Inc. 

The analysis includes everything 
from a detailed labor chart, with 
salaries based on geographical region, 
to security and disaster recovery costs. 

“We have found that when people 
are trying to calculate ROI, their 
biggest challenge is trying to under- 
stand their own IT costs, especially 
where there are a lot of people wearing 
many different hats,” says Brennan. D 
Netto is a freelance writer in 
Brookline, Mass. 


ONLINE EXCLUSIVES 
® Need a quick primer on 
ASPs and how they work? 
www. 

_ ? 


® More information, plus 
tools you can use to scout out your 
own ASPs, negotiate your own deals, protect 
yourself and keep up with the latest that ASPs 
have to offer: 
www.computerworld.com/q?k2310 


COMPUTERWORLD August 20, 2001 


Looking for 
(guarantees 


While initial purchasing and start-up 
costs may make going with an ASP 
seem like a no-brainer, especially for 
large customer relationship manage- 
ment or enterprise resource planning 
(ERP) implementations, business 
leaders and analysts warn that it's 
critical to tread cautiously and read 
the fine print. 

When Gung-Ho Co., a multimedia 
materials provider in Incline Village, 
Nev., signed a major deal with Block 
Financial Corp., an H&R Block com- 
pany, it turned to ManagedOps.com 
Inc. to host its proprietary software. 
The ASP also hosted for Gung-Ho 
back-office products from Microsoft 
Corp. and ERP applications from Far- 
go, N.D.-based Microsoft Great Plains 
Business Solutions (formerly Great 
Plains Software Inc.). 

During the first week of the project 
alone, Gung-Ho had to fulfill a con- 
tract to manufacture and distribute 
1.2 million packages of Kiplinger Tax- 
cut software to as many as 15,000 
different locations. Gung-Ho Presi- 
dent John Wade says he was under 
the gun to implement a solution 
through an ASP, but he had to take 
the time to research ManagedOps’ 
warranty policy and make sure Gung- 
Ho would be made whole should the 
service provider go out of business 
and cause the company to lose a deal 
as large as H&R Block. 

"You have to make sure they can 
meet your time line; if they get pushed 
back, so do you, and that means 
[financial] penalties in most cases,” 
Wade says. 

Businesses often forget to consid- 
er the “what if” scenarios when fac- 
toring ROI, and that’s often where 
money is lost over the long haul, says 
Paul A. Strassmann, president of the 
Information Economics Press and a 
Computerworld columnist. 

As with buying a car or renting a 
house, businesses must find out what 
an ASP'’s insurance coverage is and 
whether they will face penalties for 
nonperformance and missed dead- 
lines, Strassmann says. 

“You always want to know your exit 
plan,” Wade says. “It’s sort of like a 
marriage and a premarital agreement. 
What happens if there’s a problem?” 

- Michele Netto 
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Yipes, the defining provider of optical IP services, will change the way you look at bandwidth 
Our gigabit IP-over-fiber network lets you choose the bandwidth that’s just right for your business. 
With up to | Gbps in | Mbps increments, you get the power you need, right when you need it. 
And since the Yipes network is IP and Ethernet throughout, you won’t need any new equipment 
to tap into its robust bandwidth. Scalable, secure and super fast. That’s the Yipes network. 


Want to see the power in action? Check out www.yipes.com or call 877-740-6600. 
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‘A successful relationship with 
‘an ASP depends as much on 


lr WAS ALREADY a tense situation. 
C-bridge Internet Solutions Inc., a 
technology and consulting services 
firm in Boston, was conducting a 
live migration of its Microsoft Ex- 

| change e-mail operations to its applica- 
| tion service provider, USinternetwork- 
ing Inc. (USi) in Annapolis, Md. 

But along the way, the migration hit a 
glitch, and all external e-mail stopped 
flowing. Jason Aber, the user 
| services manager at C-bridge, 
| began troubleshooting and noti- 
fied Tod McFarland, the com- 
pany’s director of architecture 
and engineering. 

McFarland was unable to locate the 
problem, so he called USi and spoke 
with the engineers there. 

The discussions escalated. Soon 
McFarland was brainstorming with 
USi’s senior architecture engineers. 
Through trial and error, they tracked 
the problem to the routers and were 
able to restore e-mail functionality. 

“It was a pretty major problem that 
could have resulted in an e-mail out- 
age,” says Ralph Rodriguez, vice presi- 
dent and CIO at C-bridge. “They had 








your own project team as on 
the service provider you con- 
tract with. By Mary Brandel 


it done in half an hour.” 
What accounts for such a quick fix 


| of acomplex technology problem? 
| Rodriguez is quick to point to USi’s 
| “willingness to be our IT department, 


not just our ASP.” 
It definitely takes both sides to make 
an ASP relationship succeed. That’s 


| why Rodriguez also credits McFarland 


with having just the right mix of skills 
to be an excellent frontman for 
managing the ASP. 
First, McFarland is intimately 
familiar with the Exchange appli- 
cation. Second, he was able to 


| clearly articulate what was going on 


with the network and the application 
on C-bridge’s end. Third, McFarland 
understood how USi functioned as an 
ASP and trusted the relationship be- 
tween USi and his company. This last 


| factor took time to develop. 


“Originally, [McFarland] did not 


| want to open up a security hole, and IT 
| guys always want to manage their own 


stuff,” Rodriguez says. “It was through 
understanding where we are going as a 
business and working with USi that he 
changed his mind.” 
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When a firm signs up with an ASP to 
host an application or a portion of its 
internal operations, it’s not enough to 
choose the right service provider. The 
customer also has to assemble the right 
team to work with the ASP. 

Exactly who should be on that team 
varies, depending on the makeup of the 
company and IT department, as well as 
the exact nature of the ASP relation- 
ship. For example, the ASP might be 
hosting the company’s IT operations or 
one or more applications. Furthermore, 
the applications might be mission- 
critical or nonstrategic. 

In smaller companies, a help desk 
representative or end user might be the 
main ASP liaison. Bigger companies 
might deploy a larger team including an 
IT project manager, an end-user repre- 
sentative and the CIO. 

In any event, it’s safe to say that at 
many firms, the team is made up of a 
project manager from the business or 
technology side, a director of opera- 
tions, an end-user manager, a help desk 
representative and the CIO. 

But more important than title are the 
attributes of the people involved anda 
full understanding of the responsibili- 
ties of the job. 

“The ideal customer is one who un- 
derstands the ASP business, is techni- 
cally savvy and has excellent communi- 
cation skills, so we can react appropri- 
ately,” says Ajeeth Jaganneth, practice 
director at USi. 

Project management skills are also 
important. “A good project manager 
will get us involved in the early stages 
to determine risks, while other folks 
would give us a call the day before 
{they wanted something changed] and 
say, ‘We need to get this done tomor- 
row,” Jaganneth said. 

At C-bridge, Rodriguez himself 
headed up the team that chose USi 
early last year. His intent was to off- 
load a nonstrategic function from his 
20-member IT staff. 

But Rodriguez says he felt it was 
important to have McFarland, as direc- 
tor of engineering, as well as Aber, as 
manager of user services, also involved 
in the decision. 

“They needed to understand what 


m= What should you ask yourself before hiring an 
ASP? Find a quick primer on the whole ASP 
thing: www.computerworld.com/q?k2330 





KNOWLEDGE CENTER» 


USi was promising so they could ask 
their specific questions in addition 

to my 10,000-foot ones,” says Rodri- 
guez. For example, how would USi be 
reached — directly or through a virtual 
private network tunnel? How was its 
security architecture? How would out- 
ages be handled? 

“The director of engineering has to 
browbeat the provider to find out the 
score,” Rodriguez says. 

The ability to effectively browbeat 
may require a customer to have inti- 
mate knowledge of the hosted applica- 
tion, as Rodriguez and his team did with 
Exchange. But if such knowledge doesn’t 
exist, “it’s critical to have a great rela- 
tionship with the ASP, from both the 
business and technical sides,” he warns. 


| Core for Best Practices 


In either case, it’s a good idea to pull 
together a team of people representing 
both technical and business concerns. 
At Ingersoll-Rand Co., a $9 billion di- 
versified industrial manufacturer based | 
in Woodcliff Lake, N.J., a four-person 
team heads up ASP relationships. 

ASPs are a core piece of Ingersoll- 
Rand’s goals of following consistent 
best practices across the company, 
reusing IT assets and conducting rapid 
technology implementations. 

“For years, we've been doing one-off 
implementations to solve our business 
problems,” explains Robert Orshaw, 
vice president of technology at the 
company. 

Now, he says, the company has 
formed a global technology organiza- 
tion set up with best-practices leaders 
who consult with the individual busi- 
ness units to create Internet-based 
systems to solve business problems. 
Rather than manage these systems 
internally, the company will use ASPs 
to host the applications. 

For example, when Club Car Inc. 
moved to a new sales model, it needed 
call center and sales force automation 
systems to support it. Normally, the 
Augusta, Ga.-based division of Inger- 
soll-Rand would have used a business 
consultant to implement the needed 
systems. Instead, Orshaw’s group 
worked with the unit to select some 
core modules from San Mateo, Calif.- 
based Siebel Systems Inc., to be host- 
ed by Corio Inc., an ASP based in San 
Carlos, Calif. 

“Tt will be a six-month project rather 
than a three-year one,” Orshaw says. 
Plus, the company can reuse the appli- 
cations in another business unit. 

The team at Ingersoll-Rand that in- 
terfaces with Corio includes a process 
owner from the business unit, who 


The A Team 


Key IT personnel to help maintain your ASP relationship 


Assembling a team to manage your ASP is 
second in importance only to choosing the 
ASP itself. Here are some of the key players 
and responsibilities to consider 


THE ClO: ASP selection, SLA and contract 
development 


PROJECT MANAGER, technology side: 
ASP selection, system viability, architec- 
ture compatibility, SLA adherence, trou- 
bleshooting, problem escalation, cost 
containment 


PROJECT MANAGER, business side: 


ensures that business needs are met; a 
local IT project manager, who ensures 
that the system is viable and services 
are being delivered properly; and a 
project manager from the centralized 
technology organization, who ensures 
that reuse and best-practices principles 
are adhered to. 

Once the project is implemented, 
the local IT organization provides on- 
going support and is responsible for 
calling Corio if a problem can’t be 
solved. The local IT manager makes 
sure the service-level agreements 
(SLA) are adhered to. 

“It would be nice if [that person] had 
previous experience managing an out- 
sourcing provider, so that they’re famil- 
iar with SLAs and change procedures 
so you don’t have huge scope creep,” 
Orshaw says. “I would put project 
management skills as No. 1, managing 
providers as No. 2 and technical ability 
as No. 3,” in terms of important skills, 
he adds. 


ASP SLAs 


Understanding SLAs is an important 
ingredient for any company using an 
ASP. It shouldn’t just be left to the legal 
department. The director or CIO 
should also review the contract to be 
sure it aligns with how the department 
functions as a business. 

“USi has done a good job with the 
cookie-cutter SLA, but I wanted my 
own version of customer intimacy,” 
Rodriguez says. “For example, some 
people like automatically renewing 
contracts, while others don’t.” 

“The person who manages [our 
ASP relationship] has to understand 
that we're a service organization and 
manage accordingly,” agrees Kirk 
Brauch, director of technology at 


ASP selection, business viability, SLA adher 
ence, troubleshooting, problem escalatior 


DIRECTOR OF OPERATIONS: ASP selec 
tion, system viability, architecture compati- 
bility, SLA adherence, troubleshooting 
problem escalation, cost containment 


END-USER REPRESENTATIVE: P 
development for problem notification 
suring that user needs are met 


HELP DESK REPRESENTATIVE: First- 
level support, problem escalation, trouble 
shooting 


Myfujifilm.com, a subsidiary of 
Hanover Park, Ill.-based Fuji Photo 
Film USA. Myfujifilm is using Con- 
shohocken, Pa.-based Breakaway Solu- 
tions Inc. to monitor and manage the 
site, which provides Web-based file 
proofing and e-mail notification. 

“When you get down to the nitty- 
gritty of ‘Did we respond in five min- 
utes?’ and the ramifications of that, it 
takes someone who understands con- 
tract issues,” Brauch says. 

But in the end, the relationship is 
everything, and that means you need to 
have people on the team who are capa- 
ble of being strong partners. 

“Tt comes back to trust,” Brauch 
says. “Guys like me don’t like giving 
up control. You’ve got to do strenuous 
due diligence to be sure these people 
understand your business and that 
they’ve got the technical and financial 
wherewithal to handle it. You're only 
as strong as your weakest link.” 

Additionally, the application is usu- 
ally hosted in a secure facility — so 
secure that not even a CIO can walk 
into it. “It’s almost like Mission: Impos- 


sible,” Brauch says. “You have to be 


totally confident that the ASP knows 
what they’re doing.” 

So, more than having any technical 
expertise, the people managing the ASP 
need to be good communicators. “It’s 
all about negotiations — ‘Is it our prob- 
lem or their problem?’ ” Rodriguez says. 
“Your classic engineer would be a terri- 


| ble person to have on the phone.” 


Bottom line: The ASP relationship is 
a project, Brauch says. “It never stops,” 
he says. “Once it’s launched, it continu- 
ally evolves.” D 





| Brandel is a freelance writer in 


Newton, Mass. 
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DICK HUDSON 


The Time’s Not 
Right for ASPs 


HOULD YOUR IT ORGANIZATION hook up with 
an application service provider? It’s an oft- 
asked question today. A recent article in a 
leading business magazine reported on “the 
death of the modern corporation.” The story re- 
volved around what was the central theme of the 
recent World Economic Forum (WEF) in Davos, 
Switzerland. There, the world’s leading economic 


and business scholars declared that the 
Internet would force today’s corporate 
enterprises to re-evaluate what busi- 
nesses they’re in and jettison the rest 
of their entities to aligned partners and 
outsourced Web providers. Hence, 
ASPs are at the heart of the changing 
business climate. 

So, as if the CIO didn’t already have 
enough to worry about, he may 
be looking to ASPs to outsource 
nonrevenue-producing IT assets 
within his organization. 

In most of today’s modern corpora- 
tions, IT doesn’t directly produce rev- 
enue. Despite all the business initia- 
tives of the past decade to align IT 
with the customer and business units, 
IT can still be wholly outsourced. And 
if that outsourcing is successful, the 
old IT department won't be missed. 

John Chambers, Cisco’s CEO, con- 


aha Nits MM COUR th Ce ts og 


Would you consider an ASP if your 
concerns were addressed? 


Yes: No: 


MASS.. 183 RESPONDENTS. 


| curs with the basic premise of the 
| WEF’s leaders in that 70% of Cisco’s 
| products go directly from outsourced 
| partners to customers. 
So to today’s CIO, I pose this ques- 
tion: To ASP or not to ASP? 
| Given the history of ASP 
life cycles, the answer is a 
| resounding “no” — at least 
for now. However, as 
the old saw goes, the 
king can go to the sea 
and command the 
| tide not to come in, but 
| he’s going to get his feet 
| wet. ASPs are the reality of 
| today’s CIO’s future. So the 
| question isn’t “Should I,” 
but “When and how?” 
| There are hundreds, if 
not thousands, of pub- 
| lished opinions about ASPs 





DICK HUDSON is a consul- | 
tant and was CIO at 
Global Marine Inc.,a | 

Houston-based offshore | 
drilling company, for 

17 years. Contact him at 
Dick.Hudson@gim.com. 


| and what to do about them. Yet Web- 


based outsourcing is the future, and it’s 


| here to stay. The early years of any in- 
| dustry is marred by quick-buck artists, 
| poorly funded and orchestrated com- 

| panies, consolidation and death. 


Today’s ASP market is squarely 


| mired in the poorly-funded-and- 

| orchestrated stage of development. 

| The vast majority are privately held, 

| and accurate financial reporting is 

| very rare. In dealing with these compa- 


nies, telltale signs of severe resource 


| constraints, such as continuing failure 
| to meet basic service thresholds, are 

| evident to any seasoned CIO. This is 

| most often indicative of insufficient 


capital investment for infrastructure 


| development. 


When is an ASP in trouble? When it 


| suffers from constant turnover of key 
| personnel and a lack of prompt, satis- 
| factory user support. And refusal to 


provide a list of happy customers is al- 
ways a red flag for any CIO. 
So tread carefully and make due dili- 


gence a hallmark of your selection 


process. 

In the end, the ASP industry will 
survive and prosper. To 
those of you who are early 
adopters, having an updat- 
ed résumé is always a good 
Plan B. If you make it 
work, fame and fortune 
will follow, but remember 
to pull the arrows out of 
your back. 

ASPs are going to be- 
come the 800-pound goril- 
la, so get ready. The IT 
corporate function is going 
to change dramatically 
over the next 10 years, and 
CIOs will hate it, while 
CEOs will love it. D 


Top 10 reasons given by CXOs for not considering ASPs: 


No incremental value to the way we acquire and manage apps 





Redundancy of existing staff and systems 19% 


Company is too small 


13.4% 





Performance and reliability of the application service 
Service is new and unproven 


8.7% 
44% 
4.4% 


Expense 











Security of my corporate data 1.5% 





Lack of knowledge/information 1.2% 





Lack of control 1% 





Lack of application customization 0.8% 
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How much would you 
pay for ASP services? 


If the ASP provided the same level 
of service as you could provide 
in-house, would you pay... 


r— The same: 


13.1% 


More: —— 
12.3% | 
| 


zz 
Don’t 


know: 
5.2% 


How do you prefer to 
pay for ASP services? 


Value of t-——— Number of named 
transactions | 


users: 7.2% 
processed: | 
eee — Number of concurrent 
6.6% | | users: 14.1% 


Making ASPs 
More Credible 


The ASP Industry Consortium 
(ASPIC) and the Information 
Technology Association of America 
(ITAA) are both working on 
projects to make ASPs easier to 
work with and more reliable. 


Security: The ITAA and ASPIC are both 
working on best-practice recommenda- 
tions to improve security. 


Billing: ASPIC is working to standard- 
ize billing procedures between ASPs 
and between ASPs and end users. 


Certification: Both organizations are 
working to support relevant certifica- 
tions in ASP environments. 





for a limited time, a small investment 


can make a big difference 


hp vectra vi400 


Intel” Pentium” Ill Processor 1GHz 
128MB SDRAM 
20GB Ultra-ATA66 Hard Drive 
Intel Direct 3D AGP Video 
48X MAX CD-ROM 
Integrated PC! Audio 
10/100 Base-T NIC 
Microsoft” Windows” 98 SE 


3 Year, Next Business Day, 
Onsite Warranty 


$949 


you save $275 


hp netserver e800 


Intel® Pentium” Ill Processor 866MHz 
133 MHz Front Side Bus 
128MB ECC SDRAM Expandable to 2GB 


Embedded Dual Channel Ultra-2 
SCSI Controller 


40X MAX CD-ROM 
3.5-inch, 1.44MB Flexible Disk Drive 
HP NetServer Navigator 


3 Year, Next Business Day, 
Onsite Warranty 


$949 


you save $490 


hp vectra vi800 
Intel® Pentium® 4 Processor 1.3GHz 
128MB 1 RIMM PC800 RDRAM 
20GB Ultra-ATA100 7.2K RPM Hard Drive 
ATl Rage! 28 16MB Video 
48X MAX CD-ROM 
Multimedia KB 
10/100 Base-T NIC 
Microsoft” Windows” 2000 


3 Year, Next Business Day, 
Onsite Warranty 


$1,149 


you save $100 


hp netserver lp 1000r 
Intel® Pentium® Ill Processor 866MHz 
133MHz Front Side Bus 
256KB ECC L2 Cache 
256MB SDRAM 
Embedded Dual Channel Ultra-160 
SCSI Controller 
Dual Embedded 10/100 Base-TX NIC 
24X Max-Speed IDE CD-ROM 
3.5" 1.44MB Flexible Disk Drive 
64 Bit I/O 
1U Rack-Optimized Form Factor 


3 Year, Next Business Day, 
Onsite Warranty 


$1,499 


you save $475 


hp omnibook xe3 


Intel® Pentium” Ill Processor 85OMHz 
14.1-in XGA TFT Display 
128MB SDRAM 
20GB Hard Drive 
1.44MB Floppy Drive 
8X MAX DVD-ROM 
Integrated 56K Modem and 10/100 LAN 
9-Cell Lithium-lon Battery 
Microsoft” Windows” 98 SE 
1 Year Limited Worldwide Warranty 


For a limited time, HP is 
offering hot desktops, 

notebooks, and servers 

at very cool low prices. 


Call toll-free, see your 
reseller, or visit our 
website to receive 
incredible deals on 

these and other high- 

quality hardware 
solutions that can only 
come from HP. 


For a limited time 
only. Offer ends 
August 31, 2001. 


hp netserver |p 2000r 


Intel® Pentium” II Processor 866MHz 
133MHz Front Side Bus 
256KB ECC L2 Cache 
256MB SDRAM 


Embedded Dual Channel Ultra-160 
SCSI Controller 


Dual Embedded 10/100 Base-TX NIC 
48X Max-Speed IDE CD-ROM 
3.5" 1.44MB Flexible Disk Drive 
3 Open 64-Bit PCI Slots 
Redundant Power Supply Option 
2U Rack-Optimized Form Factor 


3 Year, Next Business Day, 
Onsite Warranty 


$1,999 


you save $580 


pentiume/// 


Call 1.800.307.6397, contact your local reseller, 
or visit www.hp.com/go/bizsku9 


HP PCs use genuine Microsoft® Windows® 
www.Microsoft.com/piracy/howtotell 


Price is estimated street price. Actual price may vary. Monitor not included. Intel, the Intel inside logo and Pentium are registered trade 
registered trademarks or trademarks of the Microsoft Corporation in the United States and/or other countries. ©2001 Hewlett-Packard 
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ASP Spotlight 


Many ASPs have 
flamed out in the 
past couple of years, 
but the survivors 
are building their 
networks and port- 
folios of services. 
The result: Potential 
customers are 
beginning to like 
what they see. 


GLOSSARY 


Heaven knows the computer industry 
has more than enough acronyms and 
TLAs (three-letter abbreviations) to 

se just about anybody. But the rise 
of third-party service providers has 
generated a whole bowlful of alphabet 
soup. Here are the ones we've been able 
to track down 


- Russell Kay and Mathew Schwartz 
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XSP VS. TRADITIONAL SERVICES 


Key differences between 
traditional service models and the ASP model: 


Traditional Service 
Not necessarily delivered via a network 
One-to-one or one-to-many business model 
Either externally or internally managed 
Custom or standard pricing 


RCE FRAMINGHAM. MA 


ASP Service 

Delivered via a network 

One-to-many business mode! 

Always externally managed 

Pricing based on standardized service fees 
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Main Reasons 
To Consider an ASP 


Affordable access to technology 

Ability to focus on core business competency 
Reduced need to recruit and retain new staff 
Improved cost and performance 

Reduced implementation time 





The leading criteria for selecting an ASP: 


38% 
15% 


Technical 
expertise 


Cost 


What Factors 
Might Keep You From 
Hiring an ASP? 


Are you satisfied with your 
IT service providers? 


No: 
19% 


Hype backlash 


Yes: 
81% 


Lack of bandwidth 


Low number of successful ASPs 


13% Convenience 


ASP EXPENDITURES 


Where ASPs spend your money: 


22.2% 
14.4% 


Concern over reducing time to market 
Lack of education on ASPs 


@ Operations staff 
@ Sales and marketing 


More limited freedom of choice 


ASPs’ low market penetration 


Companies already purchasing or 
renting applications through an ASP 


Companies likely to purchase 
or rent applications from an 


ASP in the future 


xSP: (Any type of) service provider Whatever you want 
as long as it represents a service delivery model that’s delivered over a network 
externally managed, and one-to-many- and fee-for-service-based 


AAA: ASP application aggregator A portal that brings 
together not only a variety of content from multiple sources, but also applications 
and business analytics from multiple providers 


AIP: Application infrastructure provider A hosting 
provider that offers a full set of infrastructure services for hosting online 
applications 


ASP: Application service provider Provides access to appli 
cations for automating functions or entire business processes. Must deliver 
applications via a network and monitor them remotely. ASPs have a one-to-many 
business model: They roll out one application, as standardized as possible, for as 


w Applications being 
delivered 


13% 
10.4% 
® Data center 10.1% 
@ Help desk support 9% 
4.3% 
@ Storage capacity 4.2% 
@ Network access/connection 4.1% 
4.4% 


3.9% 


@ Servers 


@ Network equipment 
8% 


@ Other network costs 


23% ® Other software 


| SOURCE: IOC. FRAMINGHAM, MASS. 
| 


many users as possible, and make money through economies of scale and by 
charging users an ongoing service fee. 


BSP: Business service provider An ASP that focuses on 
providing and hosting applications related exclusively to business functions 


CSP: Content service provider Gives customers access 
to specific content such as news, competitive analyses and streaming media 





DESP: Development environment service provider 
An ASP for development environments, providing tools such as development 
software and code libraries 





‘ FSP: Full service provider An ASP that offers a wide range of 


Web-based IT services, including planning and creating a Web presence, 
providing needed software, and hosting and maintaining a Web site. 
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ASP Investment 
Outlook for the US. 


IDC estimates that spending on ASP services in the U.S. will grow from $770.5 million 
in 2000 to $15 billion in 2005, representing an 81% compound annual growth rate. 


The key drivers affecting ASP spending in the U.S. include the following: 

= Economic conditions. The U.S. may be poised for a recession, or at least a slowing of 
economic growth. During such times, U.S. firms are driven to become more efficient and 
focus on their core businesses. As a result, many may turn to ASPs. 

ws ASP ecosystems that have developed. Since the ASP market is most mature in the 
U.S., companies here have been busy for quite some time developing the partnerships 
needed to deliver comprehensive, compelling service. 

@ ASP adoption by large companies. Most U.S. ASPs anticipated that at some point, 
larger firms would find value in the ASP model. Last year, many large companies became 
ASP customers at a faster rate than anticipated. 


The challenges affecting ASP spending in the U.S. include the following: 

@ Financing. Unprofitable companies can’t expect to receive unlimited funding. ASPs 
need to build efficiencies and economies of scale if they wish to stay in business. 

= Differentiation. in a more mature market, ASPs will need to develop services to distin- 
guish their offerings; application functionality alone won't be sufficient. 

m Awareness. Data suggests that U.S. end users may be more educated about ASPs but 
still aren't convinced that they should use one. 


SOURCE: IDC, APRIL 2001 (“WORLDWIDE ASP FORECAST AND ANALYSIS, 2001-2005,” BY AMY MIZORAS, 
MEREDITH McCARTY WHALEN, JESSICA GOEPFERT, KAREN MOSER AND STEPHEN GRAHAM) 


The percentage of the market that’s owned by the top 10 providers is huge now but 
will drop as other providers gain a foothold in a marketplace that’s currently 
overcrowded, analysts predict. 


* PROJECTED 
SOURCE: GARTNER INC.. STAMFORD, CONN. 


HSP: Hosted service provider Provides data center facilities for 


general-purpose server hosting and co-location. 


ISP: Internet service provider Provides basic connectivity 
to the Internet and can also host an organization's Web site. 





MSP: Managed service provider (or management 
services provider) Manages IT infrastructure and services. 


MSSP (also MSecSP): Managed security service 


provider Installs and maintains an integrated portfolio of security software 





SSP: Security service provider See MssP 
: SSP: Storage service provider Offers very high-capacity 
: data storage. 


KNOWLEDGE CENTER 


ASP ATTRITION 


Percentage of ASPs that will drop out 
of the business, go out of business 


altogether or be acquired by year’s end: 


Gartner Group estimate 60% 
Aberdeen Group estimate 80% 


Vigorous Survivors 


Despite the fallout, IDC expects surviving 
xSPs to reap substantial benefits: 


U.S. IT spending on . 
niche outsourcing 
(in millions) 


$1,545 
$771 


2000 2001 2002 2003 2004 2005 


$23,891 
@ Worldwide IT spending 
on niche outsourcing 
(in millions) 


$15,068 


$2167 
$986 


PEP: Process execution provider An ASP offering limited 
functionality, such as customer relationship management or logistics. 


PSP: Process support provider Handles support for, but not 


: execution of, business processes 


and hardware that’s preselected and integrated for each customer. 


NSP: Network service provider Provides access to network and : 


communications services. 


VSP: Vertical ASP An ASP that services a specific vertical industry 


WASP: Wireless ASP Extends a network to mobile workers via 


: wireless transmission 


PC MAGAZIN 


It’s the same as the 
early dynamics in any 
other industry. But for 

ASPs, there were 
unrealistic expecta- 
tions, and now we're 
facing a hype hangover. 


LEW HOLLERBACH, 
MANAGING DIRECTOR, ABERDEEN GROUP INC 


What we've found 
is that most ASPs that 
did go out of business 
did so because they 
couldn’t get funding 
because they didn’t 
have any customers, 
so the [impact on 
customers] has been 
relatively low. 


PAULA HUNTER, CHAIRWOMAN, 
ASP INDUSTRY CONSORTIUM 


ONLINE EXCLUSIVES 


What should you 
ask yourself before 
hiring an ASP? Need 

2 Quick primer on the 
whole ASP thing? 
www. 
com/q?22415 


More information, and tools you can use 
to scout out your own ASPs, negotiate your 
own deals, protect yourself and keep up 
with the latest ASPs have to offer: 
www. 


See the whole package - advice, tools, 
ROI, the experiences of your peers — at: 
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Software Engineers needed for 
a Houston, Texas based company 
to study, analyze, design, develop 

test, implement and maintain 
computer applications software. 
management information systems, 
Unix systems administration 
Work in Oracle, Unixware plat 
forms. Must have Masters in 
Computer Science or Engg. Plus 
2 yrs exp. in job offered. Fax 
resume to HR Dept. at 281-272 

2515 or mail to COMPQSOFT 
INC., 440 Benmar, Ste 1270 
Houston, Texas 77060. Ref 
Code: Put SE-0701 on the resume 


Programmer Analyst 
To work in various unanticipated 
locations throughout the U.S 
Duties: Under direct supervision 
analyze, plan, develop, test and 
document computer programs. 
Evaluate user requests and soft 
ware program requirements for 
new and modified programs 
Write specifications, code, test 
and debug computer programs 
Customize hardware and soft 
ware to client needs. Development 
of ON-LINE and BATCH appli 
cations. Use of COBOL, CICS 
DL1VS, VSAM and IBM-3090 
Reqs. Bachelors or foreign 
equivalent in Computer Science. 
Computer Engineering, Electrical 
or Electronics Engineering 
Computer Information Systems. 
Mathematics. Plus 2 years in the 
job offered or 2 years in a related 
occupation including Programmer 
or Systerns Analyst. $70,228; 
year, 40/hrs/wk, 8:30 AM-5PM 
Applicants must show proof of 
legal! authority to work in the U.S 
Send resume to ILLINOIS 
DEPARTMENT OF EMPLOY 
MENT SECURITY, 401 South 
State Street —- 7 North, Chicago, 
illinois 60605, Attention: Shella 
Lindsey, Reference # V-iL 26185 
AN EMPLOYER PAID AD NO 
CALLS — SEND 2 COPIES OF 
BOTH RESUME AND COVER 
LETTER 


PROGRAMMER ANALYST. 
experienced, wanted by The 
Glidden Co. dba ICi Paints for 
Cleveland office to provide 
Supply Chain systms dvipmt 
maintenance & production sup 
port. BS in Comp Sci/Comp 
Engg/MIS or equiv. Programming 
exp & skills incl OS/MVS/JCL 
IDMS/R, ADS/O, MVS COBOL 
DML, VSAM & TSO/SPF. Some 
travel reqd. Submit resume to ICI 
Paints N.A., HR Dept, Job Code 
99-298 PA-GC, 925 Euclid Ave 
Cleveland, OH 44115-1487 or 


online careerpaints @ici.com 


Human Resources Manager 
Plans and carries out policies, re- 
ating to all phases of personnel 
activity for software development 
and consulting business to include 
transactions on new hires, pro 
motions & terminations, employee 
benefits & transfers; plan recruit 
ment campaigns and new hires 
and suitable placements for 
specific comput positions 
vide technic informatior 
specifications for development of 
HR computer information system 
to compile store and retrieve 
employee data; draw up new 
employee conracts relating to 
confidentiality of trade rets 
and proprietary products, check 
for prior breech of contracts, and 
advise management on adverse 
effects of hires with on-going 
contract litigation; supervise 
employee indoctrination program 
and handie employee/contractor 
problems 
Must have degrees in computer 
science, engineering or matt 
related and in business adminis 
tration (personnel management) 
and atleast 5 years employment 
experience in IT industry 
$60,000/year. Apply by resume 
only, to Venkata Simhadri 
CEO, Time To Market, Inc., 4010 
Moorpark Avenue, Suite #205 
San Jose, CA 95117. 





|B Men ae 


Software Development Manager 
Convert legacy FoxPro 2.5 DOS 
Accounting applications into 
Windows using Visual Basic 6.0 
and Visual FoxPro 6.0 develop: 
ment platforms. Provide technical 
project management, with a 
focus on the analysis, block 
diagrams/logic flow charts 
generation, data dictionary: 
pseudocode design, implemen 
tation and program/user-levei 
documentation of the existing 
DOS legacy Accounting and 
Business Management systems 
and the new object oriented and 
multi-tier three-tier 32-bit appli 
cations. Work with several different 
relational databases utilizing 
COM/DCOM - ADO/ODBC tech 
nology and Automation Theory 
to construct our Data Repository 
Business Object and user-friendly 
graphical User Interface layers. 
Must have Master’s degree in 
Computer Science or related 
field w/emphasis on Database 
Information Management Sys 
tems, plus three years experience 
or any suitable combination of 
education, training or experience 
Must have demonstrated profes 
sional experience in all phases 
of product development, testing. 
distribution, and support, including 
Visual Basic - Object Oriented 
Programming; COM/DCOM 
technology; Active X DLL 
ADO/ODBC - Active X Data 
Objects; Active X Controls; VBA 
(MS Automation Theory); MS 
Data Access Components; Fox 
Pro for DOS; FoxPro for 
Windows; Visual FoxPro including 
extensive knowledge of ‘ADO 
and ODBC connectivity drivers 
to connect data-centric database 
management systems and MS 
Access; and relational database 
design, maintenance and ad 
ministration within MS frameworks 
Technical interview will be 
required. 40 hrs/wk. $50,000/yr 
Send resume with cover letter to 
Mr. Chad Carr, Judy Carr & 
Associates, 4215 East 60th St 
Davenport, lowa 52807 


Software Engineer, design 
develop systems for various 
business applications, determine 
feasibility of design, interface 
software/hardware, evaluate 
requirements of overall systems 
Tools: Visual Basics, MS Access, 
JAVA, ASP, Oracle, & liS. Req 
MBA or Comp. Sci. and 1 yr exp. 
Send resume to: Mithra Amaran 
JMA-IT, 6405 Metcalf Ave. Suite 
514, Overland Park, KS 66202 
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Account Executive 

Manage Contract activities with 
reference to solutions delivery & 
marketing of company products 
and services such on SCADA 
systems, Odyssey document 
and imaging system, SQL Server 
Internet Information Server and 
Active Server pages; Negotiate 
contracts for projects to be 
executed on the onsite/ offshore 
mode! in India; Propose and 
present solutions based or 
company products such as 
SCADA systems, Odyssey 
document and imaging technology 
and SQL Server, Internet Infor 
mation Server and Active S 
Solutions technologies; negotiate 
contract terms, prepare proposals 
according to development & in 
Stallation rates, draw up contracts, 
approve amendments & ensure 
compliance according to agree- 
able terms; coordinate with 
development teams to ensure 
delivery schedules & installation 
according to contract terms, and 
according to SCADA & Odyssey 
parameters; resolve marketing & 
installation problems involved in 
use of SCADA systems, Odyssey 
imaging technology; travel 
approximately 40% of time to 
make presentations & negotiate 
contracts. Must have an MBA in 
Information Systems/Marketing. 
2 yrs. of exp. in above position or 
2 yrs. exp. as an Account Exec 
utive or related position w/prior 
exp. in: Contract life cycle of 
packaged solutions such as 
Marshal or similar ERP solution 
Prior exp. in sales, negotiation, & 
formalization of contracts. Must 
be able to use Visual Basic & 
SQL Server. 40% travel time 


Applicants send cover letter 
and resume to: 


Sangeeta Das 
Software Systems & Solutions, Inc. 
1945 Cliff Valley Way, Ste. 270 
Atlanta, GA 30329 


Corliant, inc. provides IT strategy 
consulting, systems integration 
and software development to 
clients nationwide. We have 
immediate, full-time opportuni 
ties for both entry-level and 
experienced professional in any 
of the following areas 


SAP R/3 
+ Functional 

(Financials, Logistics, HR) 
+ Technical 

(BASIS, ABAP, ALE/EDI) 


NETWORKING 

+ Network Engineers & 
Consultants 
Systems Engineers 
(MCSE) 
LAN/WAN Specialist 
(CISCO) 


APPLICATION 

DEVELOPMENT 

+ Microsoft Certified Solution 
Developer 
(Visual Basic, Visual C++) 
Database Administrators 
(Oracle, SQL Server) 
Web Based Development 
(Java or JavaScript, CORBA 
Microsoft ASP, ActiveX 
COM/DCOM) 


Job opportunities are also avail 
able for Sale Managers 
Marketing Managers, Business 
Managers, Human Resources 
Managers, Controllers and 
Technical Recruiters. Bachelor's 
or Master's degree required. 
depending on position. We also 
accept the foreign education 
equivalent of the degree or the 
degree equivalent in education 
and experience. Excellent ben: 
efits. Send confidential resume 
and salary requirements to 
Corliant, Inc, 8 Neshaminy 
Interplex, Suite 209, Trevose. 
PA 19053. An equal opportunity 
employer. 


IO): 


Programmer/Analysts needed 
for Houston based firm to 
resolve end-user BaaN software 
problems using knowledge of 
enterprise resource planning in 
manufacturing. Unix, Oracle 
SQL, and PL/SQL. Must have 
Master's in Computer Science or 
Electronic Engg. plus 1 yr exp. in 
job offered. In lieu of Master's 
degree & 1 yr exp. will accept 
Bachelors in Computer Science 
or Electronic Engg plus 5 yrs 
progressive exp. using BaaN 
software. Respond to: Lucy Ortiz. 
Toshiba International Corp. 
13131 West Little York Rd 
Houston, TX 77041. Put code 
KPROG on resume 


SOFTWARE ENGINEERS (8 
positions): require Bachelor's in 
Engineering/Computer Science. 
Mathematics/Science or closely 
related field with experience 
providing skills in described duties, 
at $60,000 per year. Senior 
Software Engineers (8 positions) 
with Master's and two years 
experience, at $65,000 per year. 
Provide on-site consulting in 
design, analysis and development 
of software applications for legacy 
systems in IBM mainframe 
environment; development and 
administration in Oracle, DB2, 
SQL Server and Sybase; e- 
commerce and web applications 
development in Microsoft, Java 
and related technologies; network 
management systems developed 
with Netscape Server and related 
tools; SAP R/3 applications on 
Windows with DOS and ABAP/4 
and related modules. 40% travel 
to client sites in the United 
States. Mail resumes to: YASH 
Technologies, Inc., Human 
Resources, 605 17th Avenue 
Suite 1, East Moline, IL 61244 
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DATABASE ADMINISTRATOR 


Founded in 1987 by the late David Packard, Monterey Bay 
Aquarium Research Institute is a private oceanographic 
research institute, uniquely dedicated to the development of 
state-of-the-art equipment, instrumentation, systems and 
methods for scientific research in the deep waters of the 
ocean. Located in Moss Landing, California, MBARI's 
research center includes science and engineering laboratories, 
as well as an operations facility to support our research vessels 
and oceanographic equipment, including remotely operated 
vehicles. For more information on MBARI, please visit our 
web site at http://www.mbari.org 

This position plans and administers computerized databases, 
including base definition, structure, documentation, long 
range requirements, and operational guidelines. Ensures 
accuracy and completeness of data in master files and various 
support tools. Establishes and maintains security and integrity 
controls. Recommends policies and procedures relating to 
database management. Assists = developers, scientists 
and other staff in the use of information management and 
database technology by providing both technical support and 
database administrative support and services. Stays abreast 
of and promotes the use of information management tech- 
nologies which will improve the quality and effectiveness of 
data management and development efforts 

Bachelor's degree in a technical discipline or equivalent 
experience in database administration is required. Significant 
experience and demonstrated ability in the administration of 
Microsoft Back Office products including NT Server and SQL 
Server required. Must possess excellent communication and 
organizational skills. Must be able to work with diverse group 
of people. Must be willing and able to go to sea for a specified 
duration 

Please send resume and cover letter to MBARI, Human 
Resources, 7700 Sandholdt Road, Moss Landing, CA, 95039- 
9644, fax to (831) 775-1620, or email to jobs @mbari.org 


EOE 
MBARI Welcomes Diversity 
MBARI considers ail applicants for employment without regard 


to race, color, religion, sex, national origin, disability, or 
veteran status. 
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IT CAREERS 


Work all day on one 
of the nation’s 
largest networks. 
Then go home 


or wherever. 


Sure, we have one o country 
largest privately owned computer 
networks and the #15 1 inking on the 
Fortune 500 list. And of course, 
salaries are highly competitive. But what 
makes working here so special are our 
family-friendly benefits packages 
easy-going lifestyle, diverse workplace 
and welcoming communities. No wonder 
we were included in Computerworld’s 
“100 Best Places to Work? 

Contact State Farm Human Resources 
at jobopps.corpsouth@statefarm.com 
for information about current positions 
Or visit our website 


‘ STATE FARM 
at statefarm.com 


INSURANCE 


Get there with State Farm. 
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You and your company cannot afford to miss 
this conference! According to recent studies, a best 
in class commerce chain strategy Can reduce 
purchasing Costs and time by more than 
70% — an almost $2 million per year savings for 
the average mid-sized company! 
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Ace Technologies, Inc., headquar 
tered in Milpitas, CA, a leading 
software development firm is 
presently considering applicants 
for 
* Software Engineers 
* Consultants 
¢ Systems Analysts 
Base Administrators 
rammer Analysts 

¢ IT Project Leaders 
* Software Developers 
° IT Managers 
Qualified candidates must have 
BS/MS or equivalent and/or 
relevant work experience. If you 
want to advance your career with 
a top-notch company, please 
forward your resume to 

08-586-8339, Attn: Human 
Resources Dept 


You can 
find 
better 


JOB 


alee ey/ 14 
hand tied 
behind 


your back. 


Just point your 
mouse to the 
world’s best 

IT careers site. 


Brought to 
you by 
Computerworld, 
InfoWorld and 
Network World. 


Find out more 
Call your 
ITcareers Sales 
Representative 
or Janis Crowley, 


1-800-762-2977 
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Data Base Administrator - Design 
and administer databases in 
support of development and im 
plementation of institution wide 
radiology image archival and 
display system for medical 
school. Administer database 
related software and assist in the 
integration of workflow systems 
supported the department 
Provide administrativ 
Administer database 

written in C, C++, and Java 
Requires M.S. in Computer 
Science, Computer Engineering 
Math and Engineering and three 
(3) years experience in job or as 
System Analyst or other com- 
puter related experience providing 
skills to perform above job duties 
or B.S. and five years experience 
Experience to include C, C++ 
Java and GUI design, UNIX 
Windows 95 and NT computer 
operating systems and relational 
databases. Must be authorized 
to work in United States. $62,000 
per year. 8:00 a.m. to 5:00 p.m 
40 hours a week. Send resume 
to Linda Carrither, Alabama 
State Employment Service, 3440 
Third Ave. S., P.O. Box 12046. 
Birmingham, AL 35202-2046 
Refer to Job Order # AL 1003858. 
EOE 


IT firm in Detroit, MI seeks to fill 
the following positions 


SAP CONSULTANTS: develop- 
ment implem. of functional 
modules such as FI/CO, MM 
SD, PP. ABAP Programming 


PROGR ANALYSTS: Participate 
in all phases of s/wr development 
using Oracle 7/8 and/or Java 
Tools 


DESIGN ENGINEERS: 

Design Engineering: 

1. Demonstrated expertise in 
design, implem, data migration 
testing of PDM systems - 
Metaphase / Windchill / Enovia 
Background of Oracle RDBMS 
req'd. 

2. Exper in ICAD development & 
other KBE Object Oriented 
Systems, w/strong backgrnd in 
CAD/CAM/CAE 


REQUIREMENTS: Must have 
Bachelors or Masters or equiv in 
areas such as CS, Mechanical 
Electrical, Bus Adm, Finance or 
related field; and 2-5 yrs exp in 
the req'd area 


Positions available in Detroit MI 
Renton, WA, Boston, MA Texas 
and at client sites throughout 
US. Pls mail resume to HR 
32255 Northwestern Highway. 
#248, Farmington Hills, MI 48334 


COMPUTER/IT 

Programmer Analyst (Melville. 
New York). Multiple openings. 
Req. Bachelor's degree in 
computer science, information 
tech., MIS or engineering (in lieu 
of Bachelor's will accept 2 
additional yrs' programming 
exp.) & 2 yrs’ exp. in the job 
offered or in programming. Stated 
exp. must incl. 2 yrs’ in each of 
the following: RPG II programming; 
developing JDEdwards software 
applications with one of the 
following modules: inventory, 
purchasing or financial; & devel- 
oping Business Planning Control 
System (BPCS) software appli- 
cations. Exp. may be concurrent. 
Analyze, design, develop & im- 
plement JDEdwards & BPCS 
software applications company- 
wide on IBM AS/400 machine 
using RPG II programming lan- 
guage. 40 hrs./wk. 8:00 - 5:00 
Apply with resume to: Olympus 
America Inc., Attn: NB-PA, 2 
Corporate Center Dr., Melville 
NY 11747-3157 or fax (631) 
844-5930. Olympus America 
Inc. is an EOE M/F/D/V. 


1-800-762-2977 
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Sr. Data Warehouse Developer 
Omaha, NE: Use COBOL, SQL 
DB2, and data modeling tools to 
analyze, design and implement 
DW solutions. Support a variety 
of data mart DBMS's, including 
MS/OLAP. Provide support for 
client area business intelligence 
tool use. Requirements: Bachelor's 
degree in computer science or 
related field, plus five years 
experience. Mail resume to 
Physicians Mutual Insurance 
Company, c/o Human Resources. 
2600 Dodge St., Omaha, NE 
68131 


COMPUTER/IT 

Internet Technologist (Melville 
New York) Multiple openings 
Req. Bachelor's degree in 
computer science, information 
tech., MIS or engineering & 2 
yrs’ exp. in the job offered or in 
web development. Stated exp 
must incl. 2 yrs. in each the 
following: programming in UNIX 
& NT environments; database 
admin. incl. synchronization 
database in web produc 
environment; complete appli 
development cycle & testing 
determining & documenting re 
quirements with end users; & 
creation of manuals for end 
users. Exp. may be concurrent. 
On-call 24 hours/day, 7 days 
week. Plan, develop & maintain 
website database & app tion 
aspects of company’s internet 
activities through determination 
& documentation of end user 
requirements includ. complete 
application development cycle & 
testing. 40 hrs./wk. 8:00 00 
Apply with resume to: Olympus 
America Inc., Attn: NB-ITS, 2 
Corporate Center Dr 

NY 11747-3157 or fax 
844-5930. Olympus America 
Inc. is an EOE M/F/D/V. 


CONSULTANT 
Perform onsite and offsite software 
development and software con 
sulting. Reengineer client business 
processes through information 
technology. Develop Internet 
Intranet-based applications and 
Client/Server Applications for the 
Microsoft Windows server plat- 
form. Use Microsoft Visual Interdev 
and Microsoft Active Server 
Pages for web software devel- 
opment. Use Microsoft Visual 
Basic, Microsoft SQL Server 
and Oracle databases for 
Client/Server Applications 


Master's degree in Computer 
Science, MIS, or Electrical and 
Electronics Engineering or 
equivalent (i.e., a Bachelor's 
degree in Computer Science 
MIS, or Electrical and Electronics 
Engineering with 5 years of 
Progressive experience in soft- 
ware development). 2 years of 
related exnerience in advanced 
client/server, relational databases. 
and internev/intranet applications 
development. Yearly salary 
$80,000. Apply at the Texas 
Workforce Commission, Fort 
Worth, Texas, or send resume to 
the Texas Workforce Commis- 
sion, 1117 Trinity, Room 424T, 
Austin, Texas 78701. J.0 
#TX1102449. Ad Paid by an 
Equal Opportunity Employer. 


design 
maintair 
software 
ment us 
Basic, VB 
MTS, and ASP while adher 
the software d 
Jards and spec 
CORBA and UML. Ri 
degree in Compt 
a closely related f 
f experience in the job 
as a Programmer 
yst petitive salary 
ffered. App’ resume to: Ken 
itman, Applicatio nology 
Manager, Republic Mortgage 
Insurance, 190 Oak Plaza Bivd 
Winston-Salem, NC 27105; Attn 
Job PK 


We seek IT professionals with 
Ndustry exp. (various skills com 
bination reqd.) to teach/train & 
apply (in industry) Pro*C, C++ 
SQL Navigator, Toad, OMIG 
Unix, Quest Tools, Shell Scripts 
Dynamic SQL etc. Some positi 
require MS or equiv. CS, Comp. 
Engg. or rel. field. Others require 
BS or equiv. as above. Pay 
matching with exp. Foreign educ 
equiv &/or combination of educ: 
exp. accepted. Travel/relocation 
reqd. Res. & salary expectations 
to Multinational Institute of Infor- 
mation Tech. Inc, 1935 Cliff 
Valley Way, Ste 201, Atlanta, GA 
30329 


Software Engineer needed in 
North Alabama by manufacturer 
of electronic products to analyze. 
develop, test and maintain the 
inventory software system for 
various management applications 
in client/server environment using 
object-oriented programming 
techniques, C, Visual C++, UNIX 
Sheil Script, Oracle and its tools 
SQL*Plus, Pro*C), 4GL (Object 
View) and OLE/DDE on Windows 
95/NT and UNIX platforms; and 
support accounting system written 
n RPG on AS400. Requires B.S. 
in Computer Science + 2 years 
performing job duties above or 2 
years computer professional 
experience in client/server appli- 
cation development with C 
UNIX, and Oracle. M.S. in Com- 
puter Science + 6 months expe- 
rience as stated above also 
acceptable. Must be authorized 
to work in the United States. 
Salary: $60,704 per year. 40 
hours a week. 8:00 a.m. - 5:00 
p.m. Send resumes to Brenda 
Owensby, Alabama State 
Employment Service, 2535 
Sparkman Drive NW, Huntsville 
AL 35810-3825. Refer to Job 
Order #AL 1004736. EOE 


Computer 


IT Professionals 
AT&T has multiple openings 
all levels) in information 
technology fields. Positions 
nclude Software Engineers 
Systems Analysts, Network 
Engineers, Web Masters 
Database Administrators 
Researchers Technical 
Managers, and other IT 
positions Openings 
nationwide including Arizona 
North/Central New Jersey. 
New York California 
Colorado, Florida, Georgia 
Missouri, North Carolina 
Ohio, Pennsylvania, Texas. 
Virginia and Washington 
Some positions require a 
Bachelor's degree, some a 
Master's, others a Ph.D. Some 
require experience; others are 
entry level Interested 
candidates should apply on- 
line at: www.att.com/hr Use 
keywords IT Professionals and 
indicate location preference 
and salary requirements; or 
mail resume with cover letter 
to 


AT&T 
Human Resources 
429 Ridge Road 
Dayton, NJ 08810 


AT&T is committed to equal 
opportunity. Workplace 
diversity makes us stronger. 
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First American is seeking 
Software Engineer. Dutie 
include research, design 
and development of com 
puter software systems 
programming, and program 
testing. Send resume to 
Human Resources Manager - 
Technology, 8435 N. Stem- 
mons Freeway, Dallas TX 


75247. EOE 


Siemens Corporatio 

ings available ir L 
for the position of Information 
Technology Officer Duties: As 
sess existing accounting syst 
platform: design form app 
Cation laver so! to integr 
diverse accounting system env 
ronments; analyze business 
requirements; evaluate integ 
approach of existing ap) 

design uniform 

approach in terms methodo 
tools and opera 

architecture for 

portal, HR system a 
customer reporting system 
Reqs. MS or foreign degree 
equivalent in CS , |S or related 
field. Send resumes to: Susan 
DiGraitis, 186 Wood Aver 
South, Iselin, NJ 08830, em: 
susan.digraitis @ sc.siemens 

m, fax: 732-321-3069 


COMPUWARE 
At Compuware you car 
IT experience to work wh 
stantly developing new skills. We 
currently have the following op 
portunities 


* Programmer / Analysts 
* Database Administrators 
¢ Business Analysts 
* Web Developers 
* Product Sales/Management 
Support 
* Network Administrators 
¢ System Engineers 
¢ Software Devel 
neers 
* OA Analysts 
¢ Project Managers 


For the following areas: Addison 
TX; Atlanta, GA; Appleton, WI! 
Austin, TX; Boston MA; Baltimore 
MD; Charlotte, NC; Columbus 
OH; Cincinnati, OH; Cleveland 
OH; Colorado Springs, CO; Dallas. 
TX; Denver, CO; Detroit, Mi 
Houston, TX; irvine, CA; Itaska/ 
Rosemont, IL; Jacksonville, FL 
Kansas City, MO/KS; LaJolla 
CA; Madison,WI; McLean, VA 
Minneapolis, MN; Nashua, NH 
Nashville, TN; Oakland, CA 
Phoenix, AZ; Seattle, WA; St 
Louis, MO; Tampa, FL; Woodland 
Hills, CA 

Some travel may be required 


Please indicate specific title 
location you are applying for on 
your application letter. Send your 
resume referring to ad #1TC0801 
to: Compuware Corporation, 
Attn: Recruiting Dept. 31440 
Northwestern Hwy., Farmington 
Hills, Mi 48334. E-mails: 
ads @compuware.com 
www.compuware.com EOE 


Software 
Engineers and 
Other Information 
Technology 
Professionals 


Employee-owned Science 
Applications International 
Corporation (SAIC), 


SAIC 
Human Resources, REI 
PT, 1450 Poydras Street, 
Suite 670, New Orleans, LA 
70112; Fax: (800) 650-3562 


Science Appiications International Corporation 


AIC 


—_—_—_——— 1 
Www.Salc.com 
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Continued from page 1 


Licenses 


Ohio. “There was not enough 
advanced communication.” 

Ricker said that IBM, anoth- 
er large technology partner, 
typically contacts his company 
a year in advance of making 
major pricing or 
changes “so we have time to 
adjust our budget.” 

“I think Microsoft continues 
to struggle with this whole en- 
terprise thing,” said Ricker, 
who __ oversees than 
30,000 PCs. 

Bill Landefeld, vice presi- 
dent of worldwide licensing 
and pricing at Microsoft, said 


licensing 


more 


the company is “getting a lot of 


very positive feedback” and 
“some mixed feedback” as it 
works to educate 
and partners about the often 
complicated changes. 
Landefeld said his company 
launched the changes to sim- 


customers 


| exactly how 


have bristled at the volume li- 
cense and upgrade changes, 
and _ their 
have consequences for Micro- 
Several IT managers 
warned that they may upgrade 
less often or consider looking 


uneasiness could 


soft. 


more seriously at competitors’ 
products rather than pony up 
for potentially costly licenses 
or upgrades. 

“If Microsoft continues to 
make my choices narrower and 
life tougher for me, they'll see 
little monopoly 
they really do have over this 
market, and we’ll exercise our 
choices to go somewhere else,” 
said Jim Prevo, CIO at Green 
Mountain Coffee Inc. in Water- 
bury, Vt. Prevo added that he 
had never even thought about 


| considering alternatives until 


he was confronted with Mi- 


| crosoft’s licensing changes. 


Rob Enderle, an analyst at 
Cambridge, Mass.-based Giga 
Information Group Inc., said 
of his firm’s clients, a 
$2 billion insurance company, 


one 


Microsoft's Volume Licensing Programs 


EFFECTIVE OCT. 1 


Open Agreement: 
Five-license mini- 


mum, 2-year term 3-year term 


Select Agreement: 
250-license mini- 
mum (approximate), 
2-year term 


Enterprise Agree- 
ment: 500-license 


Open Agreement: No change 
Select Agreement: 250-license minimum, 


Enterprise Agreement: 250-license minimum, 
3-year term for standard set of Microsoft 
products on all PCs 


Enterprise Agreement Subscription: This new 
option allows customers with Enterprise Agreements to 
rent software for a fixed time. The cost is about 15% less 


minimum, 3-year term per year than a new Enterprise Agreement. 


plify licensing, ease software 
administration, streamline its 
sales process and provide cus- 
tomers with more flexibility 
and choice, including a new 
subscription option. 

Analysts and users, in con- 
trast, have viewed the move as 
a less-than-subtle attempt to 
induce customers to upgrade 
more often and provide Micro- 
soft with a more steady and 
predictable cash stream as rev- 
enue growth wanes. 


But many corporate users ! 





is yanking out everything but 
Microsoft’s desktop products 
in response to the changes. En- 
derle said that among 
clients who have contacted 
Giga, about 30% are “really up- 
set,” and only one is happy. 
The latter is an investment 
house that will see its costs go 
down as a result of discounts 
available to Enterprise Agree- 
ment holders. “This is a com- 
pany who chases technology,” 
Enderle noted. “They always 
install the more current stuff.” 


NEWS 


An Enterprise 


entitles a customer to a stan- 


Agreement 


dard set of Microsoft products 
on all of PCs 


through it, as well as access to 


the licensed 
any upgrades released during 
the contract’s three-year term. 
Such 
have found favor with large 
companies that use many Mi- 
crosoft software products and 


agreements _ typically 


don’t want the hassle of man- 
aging their licenses. 
Enterprise Agreement hold- 
ers, in general, aren’t bellyach- 
ing, since Microsoft imposed 
few changes on that top cus- 
tomer group. To entice more 
consider the 
more costly Enterprise Agree- 


customers to 


ment option, Microsoft even 
lowered the qualification 
threshold from 500 licenses to 
250, effective Oct. 1. 

But many midsize and even 
some large companies contin- 


| ue to hold the next level of 


license: the Select Agreement 
(see chart). That group is rais- 
ing the most complaints. 
That’s not surprising, since 
Select Agreement holders are 
seeing some of their 
expensive upgrade options, in- 


least- 


| cluding the popular version- 


upgrade program, eliminated 


| as of Oct. 1 in favor of a Soft- 


ware Assurance plan, which 
Landefeld would 
users a more predictable way 
to license software and admin- 
ister upgrades. 

Under the Software Assur- 
ance program, users must pay 


said give 


| on an annual basis 25% of the 


license fee for any server prod- 
uct and 29% of a desktop prod- 
uct’s price for the right to up- 


grade to the latest available 
| version of 
the | 


the software. To 
qualify, a company must use 
the current version, a provi- 
sion that isn’t sitting well with 
some IT managers. 

“Honestly, you’re looking at 


| paying the money every year 


for Software Assurance, and to 
me, that’s like they’re dictating 


| to you when to upgrade,” said 


Jamie Ratliff, a technology ad- 
ministrator for the city of Vic- 
toria, Texas, which has a popu- 


lation of 62,000. “We don’t up- 
grade that fast. We're on a four- 
year cycle to upgrade.” 

Ratliff is encouraging ag- 
grieved parties to support a 
group he has founded called 
Microsoft Users Against Soft 
ware Assurance. As of Aug. 16, 
59 people had signed a petition 
at www.muasa.org since its 
Aug. 4 launch. 

One of the ways that users 
can pave the way for a move to 
Software Assurance is to buy 
into the Upgrade Advantage 
(UA) program. UA gives users 
access to all upgrades within 
the time frame of their con- 
tracts. The UA option had 
been scheduled for elimination 
Oct. 1, but in response to cus- 
tomer requests, Microsoft ex- 
tended the option until Feb. 28. 


Landefeld said he doesn’t 


anticipate further changes. “If 


you keep tweaking a program 
like this, it gets very complicat- 
ed very quickly,” he said. 

Many users are evaluating 
their Enterprise 
and Software Assurance 
tions. But for the 
prospect of upgrading fre- 
quently enough to make those 
options cost-effective isn’t ap- 
pealing. Some said they plan to 


Agreement 
op- 


others, 


buy any new software licenses 
they need when they upgrade 


| tonew PC hardware. 


Steve Quiett, an information 
systems architect at Barney & 
Barney LLC, an insurance bro- 
ker in San Diego, said Software 
Assurance would make his 
costs soar by $300 per PC. 


| With 175 PCs, that’s $52,500. 


“What I get for that is not to 


| have to go through the activa- 


tion wizard for Office,” Quiett 


| said. “I report to the CFO, who 


looks at me and says, ‘What are 
you, nuts?’ ” 

Quiett said he will buy new 
PCs every three to four years 


| and relicense any software he 
| needs rather than go for the 
| Software Assurance option. D 


‘Quick 


This story, with 
additional c 
can be found 
Web site 


Link 


www.computerworld.com/q?22761 
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Set for Elimination 


Version Upgrade Program: For 


nthe 


> UDOTat 


same fF 


+f 


Product Upgrade Pr 


itive Upgrade Program: 


sty rs upgrading from a 


Language Upgrade Program: For 
customers needing multilang 


Versions. 


Upgrade Advantage: Gives cus- 


tomers with eligible prior product 
version an upgrade to new version 
and access to all upgrades within 
contract time frame. 


What's Next? 


Enterprise Agreement: 250- 
license minimum, 3-year term; users 


get standard set of Microsoft prod- 
ucts for all PCs. 


Enterprise Agreement Sub- 
scription: Software can be rented 
for a fixed time period for about 15% 
of the cost of a new Enterprise 
Agreement. 


Software Assurance: Two-year 
term for Open Agreement holder 
three-year term for Select Agree- 
ment holder. Entitles user to latest 
version of a product while agree- 
ment is in effect. User with current 
product version can enroll through 
Feb. 28. Annual cost is 25% of 
license fee for server software and 
29% of desktop license price. 


Perpetual license/Windows 
2000 Professional license: Cus- 
tomer can purchase brand-new 
license for product. Because cus- 
tomer has full Windows license for 
PCs bought through resellers, cus- 
tomer can purchase upgrade for 
Windows desktop operating system. 


Upgrade Advantage: Provides up- 
grade to current product version. 
Grandfathers user to Software As- 
surance for up to two years. Program 
is available through Feb. 28. 
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Light on ASPs 


OW MANY IT PEOPLE DOES IT TAKE to change a light 


bulb? The correct answer: IT people shouldn’t change 

light bulbs. Janitors should change light bulbs. Why? 

Not because IT people can’t do it, but because light- 

bulb changing is a function that can be identified, par- 
titioned and executed at a lower cost by a janitor than by IT people. 
Changing light bulbs ourselves just doesn’t make sense. 


Which brings us to ASPs. Sure, they’re more 
expensive than janitors. But they’re still just 
changing light bulbs. They’re taking over some 
IT function that we could do ourselves and do- 
ing it better or less expensively than we would. 

Is outsourcing an IT function to an ASP a 
good idea? Maybe. It depends on the function, 
the ASP and the IT shop. The potential advan- 
tages are obvious: lower costs and staffing re- 
quirements. 

The potential problems are real, too. Maybe 
they’re scaring you or your boss or your IT 
shop away from seriously considering ASPs. 
Maybe they just make a convenient excuse to 
avoid a change. 

Funny thing, though: Most every significant 
issue with an ASP is right there with the light 
bulbs, too. 

If a light bulb burns out, IT people will be 
without light until it’s replaced. Light is a criti- 
cal (if mundane) IT function — without it, you 
won't get any work done. That could make a 
burned-out light bulb a crisis issue — unless 
there’s enough extra light so the working light 
bulbs that remain are enough to get by on. Out- 
sourcing requires backup - and possibly oversupply. 

It’s unlikely all the lights will burn out at 
once. But if they do, you’re better off with an IT 
person changing a light bulb than waiting for 
the janitor to make his rounds. Out- 
sourcing requires contingency planning 
for the unlikely event that the ASP fails 
entirely. 

Unlike the IT people working un- 
der those lights, the janitor won’t 
notice the reduced lighting immedi- 
ately. It will take time for the janitor 
to notice and then change the light 
bulb. Outsourcing means delays. 

If the janitor doesn’t have the 
right size light bulb in the janitor’s 
closet, he’ll have to order it, which 
means more delays. Outsourcing risks 
daisy-chain delays. 


FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes@computerworld.com. 


If the janitor finds a spec-compliant substi- 
tute light bulb and uses it, it may not meet the 
lighting needs of the people under it as well as 
the old bulbs did. Outsourcing risks inappropriate 
substitution. 

If users discover a potentially better light 
bulb — whether it complies with the specs or 
not — it will take time and may require negotia- 
tion with the janitor to get him to try the new 
light bulbs. Outsourcing increases the cost and time 
required for improvement or innovation. 

If the janitor gets sick, light bulbs may take 
longer to get changed. Outsourcing increases the 
risk of process failure due to problems with the out- 
sourcer. 

If the janitors go on strike or stage a work 
slowdown, you may be without new light bulbs 
for an unknown period. If the janitor can’t buy 
new light bulbs because the light-bulb company 
won't accept a purchase order, ditto. Outsourcing 
effectiveness may be subject to work stoppages and 
other business conflicts. 

If problems develop with the light-bulb- 
changing process, the fact that there’s no pre- 
scribed direct communication between users 
and the janitor may prevent those problems 
from being solved early, before they become 
light-threatening. Outsourcing may reduce the 
chances of early identification and solution of prob- 
lems on the ASP’s side. 

If the janitor turns out to be a lazy 
bum, you won't get good light-bulb 
service until you get rid of him — 
which may be hard to do. Outsourcing 
may lock you into a supplier who can’t or 
won't get the job done right. 

Serious issues? Sure. And you 
should take a cold, hard look at each 
potential problem — and how you'll 
handle it — before handing off any 
IT function to an ASP. 

But none of these issues is fatal. 

If they were, we'd all be changing 
our own light bulbs. D 
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THIS MINICOMPUTER mod- 
el's name translates into Chinese 
as “the curse,” says a software 
pilot fish who works for the ven- 
dor. So when one Hong Kong 
customer reports intermittent 
crashes that seem to be timed to 
the phases of the moon, “every- 
body here fell over laughing at 
the Oriental superstitions,” fish 
says. Until it turns out the Chi- 
nese techs are right. The cus- 
tomer’s building is right by the 
bay, and at the high tides that 
come with a full moon, water in 
the basement is shorting out the 
building's wiring. 


PILOT FISH doesn’t take long 
to figure out why this remote 
office can’t connect to the cor- 
porate wide-area network: A 
lightning storm has taken out the 
router. “What could have caused 
this?” asks the site manager? “I 
tied knots in all the power cords 
to prevent any surge from get- 
ting through.” 


INTERMITTENT NETWORK 
problems are driving this pilot 
fish nuts. After months of trou- 
bleshooting and $10,000 in re- 
placement hardware, this remote 
site still has trouble every time it 
rains. “One day, finally, every- 
thing starts going haywire while 
I'm there,” he says. He traces a 
power problem back to the cir- 
cuit breaker box - from which 
rainwater is pouring. “The roof 


i 


a 
———— 
leaked right into the electrical 
panels,” fish says. Do you know 
about this? fish asks local staff. 
“Oh, yeah,” they say. “We figured 
when it fried, we'd get it fixed.” 


USER'S KEYBOARD isn't 
working, and when pilot fish 
checks it out, it seems heavy. 
“When | tilted it sideways, 
enough water and food particles 
poured out, you could have 
made soup,” fish says. We must 
have had a roof leak after that 
last big thunderstorm, user sug- 
gests. “On the seventh floor of a 
12-story building?” fish asks. Co- 
workers, finally spill the beans, he 
says: “A liter bottle of drinking 
water was the cause.” 


OVERHEATING PRIORITIES 
Air conditioning goes down in a 
school district office during a 
heat wave. But a quick-thinking 
IT pilot fish aims a fan at the 
server to keep it cool, so secre- 
taries can continue to enter data. 
That works fine - until a principal 
walks by. He touches the fan's 
motor housing, decides it’s get- 
ting too hot and switches it off. 
Sighs the pilot fish, “The com- 
puter immediately crashes.” 


Warm up my mailbox: sharky@ 
computerworld.com. You get 
a stylish Shark shirt if your true 
tale of IT life sees print - or if it 
turns up in the daily feed at 
computerworld.com/sharky. 


The 5th Wave 
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“What I'm looking for ave dynamic Web applications 
and content, ae Web innuendoes and ery = 

























THE VISITORS FROM A PARALLEL UNIVERSE HAD KNOWLEDGE. BUT NOT LIKE THIS. 
LOTUS ror KNOWLEDGE MANAGEMENT 


9: lotus.com/visitkm | 


IT’S A DIFFERENT KIND or WORLD. 
YOU NEED A DIFFERENT KIND or SOFTWARE 


© business software 


SUNIONE 


‘CERTIFIED 


How do you tell a good service provider from any other? Very easily. 


When considering a service provider, there’s just one thing you need to look for: SunTone”™ Certification. It’s your reassurance that 
a hosted service has met the most demanding standards on the planet. What does that mean for your network? Peak performance, 


reliability, extreme security and 24/7 availability. So you can hand over control of your mission-critical data and applications 


with canfidence, instead of fear. To learn more, visit sun.com/suntone take it to the n® Go SUN 


microsystems 
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